In the Linux kernel, the following vulnerability has been resolved:
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
Since handle->h_transaction may be a NULL pointer, so we should change it to call is_handle_aborted(handle) first before dereferencing it.
And the following data-race was reported in my fuzzer:
================================================================== BUG: KCSAN: data-race in jbd2_journal_dirty_metadata / jbd2_journal_dirty_metadata
write to 0xffff888011024104 of 4 bytes by task 10881 on cpu 1: jbd2_journal_dirty_metadata+0x2a5/0x770 fs/jbd2/transaction.c:1556 __ext4_handle_dirty_metadata+0xe7/0x4b0 fs/ext4/ext4_jbd2.c:358 ext4_do_update_inode fs/ext4/inode.c:5220 [inline] ext4_mark_iloc_dirty+0x32c/0xd50 fs/ext4/inode.c:5869 __ext4_mark_inode_dirty+0xe1/0x450 fs/ext4/inode.c:6074 ext4_dirty_inode+0x98/0xc0 fs/ext4/inode.c:6103 ....
read to 0xffff888011024104 of 4 bytes by task 10880 on cpu 0: jbd2_journal_dirty_metadata+0xf2/0x770 fs/jbd2/transaction.c:1512 __ext4_handle_dirty_metadata+0xe7/0x4b0 fs/ext4/ext4_jbd2.c:358 ext4_do_update_inode fs/ext4/inode.c:5220 [inline] ext4_mark_iloc_dirty+0x32c/0xd50 fs/ext4/inode.c:5869 __ext4_mark_inode_dirty+0xe1/0x450 fs/ext4/inode.c:6074 ext4_dirty_inode+0x98/0xc0 fs/ext4/inode.c:6103 ....
value changed: 0x00000000 -> 0x00000001 ==================================================================
This issue is caused by missing data-race annotation for jh->b_modified. Therefore, the missing annotation needs to be added.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-tools-debuginfoUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.35-55.103Upgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-livepatch-6.1.144-170.251Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Sep 9, 2025 | Jul 10, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 14, 2025 | Jul 10, 2025 |
| Suse | — | Upgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-manUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04c | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 3, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub