In the Linux kernel, the following vulnerability has been resolved:
ext4: do not create EA inode under buffer lock
ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking (which acquires locks on other buffers) under the buffer lock. This can even deadlock when the filesystem is corrupted and e.g. quota file is setup to contain xattr block as data block. Move the allocation of EA inode out of ext4_xattr_set_entry() into the callers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-rt-kvmUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debug-devel-matched | Sep 26, 2024 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-devel | Feb 17, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matched | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade dtb-amd | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-44-generic-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub