In the Linux kernel, the following vulnerability has been resolved:
ext4: do not create EA inode under buffer lock
ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking (which acquires locks on other buffers) under the buffer lock. This can even deadlock when the filesystem is corrupted and e.g. quota file is setup to contain xattr block as data block. Move the allocation of EA inode out of ext4_xattr_set_entry() into the callers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libperfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-coreUpgrade kernel-64kUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-core | Sep 26, 2024 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade rtlaUpgrade perf-debuginfo | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-default | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub