In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
syzbot reports a f2fs bug as below:
------------[ cut here ]------------ kernel BUG at fs/f2fs/inline.c:258! CPU: 1 PID: 34 Comm: kworker/u8:2 Not tainted 6.9.0-rc6-syzkaller-00012-g9e4bc4bcae01 #0 RIP: 0010:f2fs_write_inline_data+0x781/0x790 fs/f2fs/inline.c:258 Call Trace: f2fs_write_single_data_page+0xb65/0x1d60 fs/f2fs/data.c:2834 f2fs_write_cache_pages fs/f2fs/data.c:3133 [inline] __f2fs_write_data_pages fs/f2fs/data.c:3288 [inline] f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3315 do_writepages+0x35b/0x870 mm/page-writeback.c:2612 __writeback_single_inode+0x165/0x10b0 fs/fs-writeback.c:1650 writeback_sb_inodes+0x905/0x1260 fs/fs-writeback.c:1941 wb_writeback+0x457/0xce0 fs/fs-writeback.c:2117 wb_do_writeback fs/fs-writeback.c:2264 [inline] wb_workfn+0x410/0x1090 fs/fs-writeback.c:2304 process_one_work kernel/workqueue.c:3254 [inline] process_scheduled_works+0xa12/0x17c0 kernel/workqueue.c:3335 worker_thread+0x86d/0xd70 kernel/workqueue.c:3416 kthread+0x2f2/0x390 kernel/kthread.c:388 ret_from_fork+0x4d/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
The root cause is: inline_data inode can be fuzzed, so that there may be valid blkaddr in its direct node, once f2fs triggers background GC to migrate the block, it will hit f2fs_bug_on() during dirty page writeback.
Let's add sanity check on F2FS_INLINE_DATA flag in inode during GC, so that, it can forbid migrating inline_data inode's data block for fixing.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 26, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-202-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-4.4.0-261-lowlatency | Nov 20, 2024 | Aug 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub