In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix to drop all discards after creating snapshot on lvm device
Piergiorgio reported a bug in bugzilla as below:
------------[ cut here ]------------ WARNING: CPU: 2 PID: 969 at fs/f2fs/segment.c:1330 RIP: 0010:__submit_discard_cmd+0x27d/0x400 [f2fs] Call Trace: __issue_discard_cmd+0x1ca/0x350 [f2fs] issue_discard_thread+0x191/0x480 [f2fs] kthread+0xcf/0x100 ret_from_fork+0x31/0x50 ret_from_fork_asm+0x1a/0x30
w/ below testcase, it can reproduce this bug quickly: - pvcreate /dev/vdb - vgcreate myvg1 /dev/vdb - lvcreate -L 1024m -n mylv1 myvg1 - mount /dev/myvg1/mylv1 /mnt/f2fs - dd if=/dev/zero of=/mnt/f2fs/file bs=1M count=20 - sync - rm /mnt/f2fs/file - sync - lvcreate -L 1024m -s -n mylv1-snapshot /dev/myvg1/mylv1 - umount /mnt/f2fs
The root cause is: it will update discard_max_bytes of mounted lvm device to zero after creating snapshot on this lvm device, then, __submit_discard_cmd() will pass parameter @nr_sects w/ zero value to __blkdev_issue_discard(), it returns a NULL bio pointer, result in panic.
This patch changes as below for fixing: 1. Let's drop all remained discards in f2fs_unfreeze() if snapshot of lvm device is created. 2. Checking discard_max_bytes before submitting discard during __submit_discard_cmd().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-azureUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1017-oem | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub