In the Linux kernel, the following vulnerability has been resolved:
ext4: do not create EA inode under buffer lock
ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking (which acquires locks on other buffers) under the buffer lock. This can even deadlock when the filesystem is corrupted and e.g. quota file is setup to contain xattr block as data block. Move the allocation of EA inode out of ext4_xattr_set_entry() into the callers.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-docUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade libperfUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules | Sep 26, 2024 | Jul 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo | Feb 17, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Oct 9, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade bpftoolUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade libperfUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debuginfo | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-debug-livepatch-devel | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub