In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
syzbot reports a f2fs bug as below:
------------[ cut here ]------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted 6.9.0-rc6-syzkaller-00012-g9e4bc4bcae01 #0 RIP: 0010:f2fs_write_inline_data+0x781/0x790 fs/f2fs/inline.c:258 Call Trace: f2fs_write_single_data_page+0xb65/0x1d60 fs/f2fs/data.c:2834 f2fs_write_cache_pages fs/f2fs/data.c:3133 [inline] __f2fs_write_data_pages fs/f2fs/data.c:3288 [inline] f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3315 do_writepages+0x35b/0x870 mm/page-writeback.c:2612 __writeback_single_inode+0x165/0x10b0 fs/fs-writeback.c:1650 writeback_sb_inodes+0x905/0x1260 fs/fs-writeback.c:1941 wb_writeback+0x457/0xce0 fs/fs-writeback.c:2117 wb_do_writeback fs/fs-writeback.c:2264 [inline] wb_workfn+0x410/0x1090 fs/fs-writeback.c:2304 process_one_work kernel/workqueue.c:3254 [inline] process_scheduled_works+0xa12/0x17c0 kernel/workqueue.c:3335 worker_thread+0x86d/0xd70 kernel/workqueue.c:3416 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
The root cause is: inline_data inode can be fuzzed, so that there may be valid blkaddr in its direct node, once f2fs triggers background GC to migrate the block, it will hit f2fs_bug_on() during dirty page writeback.
Let's add sanity check on F2FS_INLINE_DATA flag in inode during GC, so that, it can forbid migrating inline_data inode's data block for fixing.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 26, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-bluefieldUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-202-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1176-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-oemUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure | Nov 20, 2024 | Aug 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub