In the Linux kernel, the following vulnerability has been resolved:
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
Fuzzing reports a possible deadlock in jbd2_log_wait_commit.
This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates because the file descriptor is opened with O_SYNC. This can lead to the jbd2_journal_stop() function calling jbd2_might_wait_for_commit(), potentially causing a deadlock if the EXT4_IOC_MIGRATE call races with a write(2) system call.
This problem only arises when CONFIG_PROVE_LOCKING is enabled. In this case, the jbd2_might_wait_for_commit macro locks jbd2_handle in the jbd2_journal_stop function while i_data_sem is locked. This triggers lockdep because the jbd2_journal_start function might also lock the same jbd2_handle simultaneously.
Found by Linux Verification Center (linuxtesting.org) with syzkaller.
Rule: add
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade bpftool | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-devel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-oem-24.04aUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-aws-fips-4.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-4.4.0-274-genericUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-4.15.0-1194-azureUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-intelUpgrade linux-image-azure-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-azure-4.15Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1186-awsUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-243-genericUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-fipsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-1187-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-aws-4.15Upgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oracle-4.15Upgrade linux-image-gcp-4.15 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub