In the Linux kernel, the following vulnerability has been resolved:
ext4: fix i_data_sem unlock order in ext4_ind_migrate()
Fuzzing reports a possible deadlock in jbd2_log_wait_commit.
This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates because the file descriptor is opened with O_SYNC. This can lead to the jbd2_journal_stop() function calling jbd2_might_wait_for_commit(), potentially causing a deadlock if the EXT4_IOC_MIGRATE call races with a write(2) system call.
This problem only arises when CONFIG_PROVE_LOCKING is enabled. In this case, the jbd2_might_wait_for_commit macro locks jbd2_handle in the jbd2_journal_stop function while i_data_sem is locked. This triggers lockdep because the jbd2_journal_start function might also lock the same jbd2_handle simultaneously.
Found by Linux Verification Center (linuxtesting.org) with syzkaller.
Rule: add
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-6.1.115-126.197Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfo | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Feb 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Feb 11, 2025 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-4.4.0-1149-awsUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-4.15.0-1179-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-ibmUpgrade linux-image-4.15.0-2087-gcp-fipsUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-4.15.0-1194-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-4.4.0-1150-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-2124-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-4.15.0-1141-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fips-4.15Upgrade linux-image-4.4.0-274-genericUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-aws-hweUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-aws-fips-4.15Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-4.4.0-274-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-4.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-fipsUpgrade linux-image-4.15.0-243-genericUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1186-awsUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oracle-4.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64kUpgrade linux-image-azure-4.15Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-4.15Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1187-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-243-lowlatencyUpgrade linux-image-virtual | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub