CVE-2024-50006 In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in…
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible deadlock in jbd2_log_wait_commit. This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates because the file descriptor is opened with O_SYNC. This can lead to the jbd2_journal_stop() function calling jbd2_might_wait_for_commit(), potentially causing a deadlock if the EXT4_IOC_MIGRATE call races with a write(2) system call. This problem only arises when CONFIG_PROVE_LOCKING is enabled. In this case, the jbd2_might_wait_for_commit macro locks jbd2_handle in the jbd2_journal_stop function while i_data_sem is locked. This triggers lockdep because the jbd2_journal_start function might also lock the same jbd2_handle simultaneously. Found by Linux Verification Center (linuxtesting.org) with syzkaller. Rule: add
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.12 | earliest → < 6.12 | 6.12 |
| Linux 6.11 | earliest → < 6.11.3 | 6.11.3 |
| Linux 6.10 | earliest → < 6.10.14 | 6.10.14 |
| Linux 6.6 | earliest → < 6.6.55 | 6.6.55 |
| Linux 6.1 | earliest → < 6.1.113 | 6.1.113 |
| Linux 5.15 | earliest → < 5.15.168 | 5.15.168 |
| Linux 5.10 | earliest → < 5.10.227 | 5.10.227 |
| Linux 5.4 | earliest → < 5.4.285 | 5.4.285 |
| Linux 4.19 | earliest → < 4.19.323 | 4.19.323 |
Show the 8 other branches Hide the 8 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux | 3.10 | No fix stated |
| RUGGEDCOM RST2428P 3.2 | earliest → < 3.2 | 3.2 |
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.2 | earliest → < 3.2 | 3.2 |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.2 | earliest → < 3.2 | 3.2 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |