In the Linux kernel, the following vulnerability has been resolved:
ext4: fix timer use-after-free on failed mount
Syzbot has found an ODEBUG bug in ext4_fill_super
The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We should guarantee the timer is no longer active before kfree(sbi).
When filesystem mounting fails, the flow goes to failed_mount3, where an error occurs when ext4_stop_mmpd is called, causing a read I/O failure. This triggers the ext4_handle_error function that ultimately re-arms the timer, leaving the s_err_report timer active before kfree(sbi) is called.
Fix the issue by canceling the s_err_report timer after calling ext4_stop_mmpd.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.178-120.178Upgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-livepatch-5.10.227-219.884Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-4.14.355-275.603Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade perfUpgrade kernel-livepatch-5.10.234-225.910Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfo | Feb 4, 2025 | Oct 21, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 18, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-livepatch-6.1.112-124.190 | Feb 17, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-kvm-5.15Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub