In the Linux kernel, the following vulnerability has been resolved:
ext4: fix double-free of blocks due to wrong extents moved_len
In ext4_move_extents(), moved_len is only updated when all moves are successfully executed, and only discards orig_inode and donor_inode preallocations when moved_len is not zero. When the loop fails to exit after successfully moving some extents, moved_len is not updated and remains at 0, so it does not discard the preallocations.
If the moved extents overlap with the preallocated extents, the overlapped extents are freed twice in ext4_mb_release_inode_pa() and ext4_process_freed_data() (as described in commit 94d7c16cbbbd ("ext4: Fix double-free of blocks with EXT4_IOC_MOVE_EXT")), and bb_free is incremented twice. Hence when trim is executed, a zero-division bug is triggered in mb_update_avg_fragment_size() because bb_free is not zero and bb_fragments is zero.
Therefore, update move_len after each extent move to avoid the issue.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade perfUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-devel | Aug 12, 2024 | Apr 3, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.149-99.161Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-4.14.343-259.562Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Dec 12, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools | Jul 23, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Apr 3, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 25, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfo | Aug 22, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-debugUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade kernel-preemptUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade gfs2-kmp-rt | Apr 29, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1020-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-6.5.0-1021-azureUpgrade linux-image-6.5.0-1021-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-4.15.0-1177-azureUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1020-gcpUpgrade linux-image-6.5.0-35-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-4.4.0-254-genericUpgrade linux-image-6.5.0-1023-oracleUpgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-6.5.0-1017-raspiUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.5.0-35-lowlatency-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1019-nvidia-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-oracle-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-1023-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-225-genericUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1014-starfiveUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-nvidia-6.5Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-4.15.0-1162-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-oemUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-1016-laptopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-225-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-35-lowlatencyUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-4.4.0-1169-awsUpgrade linux-image-raspi2Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-35-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1168-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1019-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-4.4.0-254-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-4.4.0-1132-kvmUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1131-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1152-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-4.4.0-1131-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub