In the Linux kernel, the following vulnerability has been resolved:
ext4: do not create EA inode under buffer lock
ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking (which acquires locks on other buffers) under the buffer lock. This can even deadlock when the filesystem is corrupted and e.g. quota file is setup to contain xattr block as data block. Move the allocation of EA inode out of ext4_xattr_set_entry() into the callers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-core | Sep 26, 2024 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-devel | Feb 17, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade libperf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-core | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-default-livepatch-devel | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-22.04c | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub