CVE-2023-54311
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock by calling ext4_handle_dirty_dirblock() when it already has taken the directory lock. There is a similar self-deadlock in ext4_incvert_inline_data_nolock() for data files which we'll fix at the same time. A simple reproducer demonstrating the problem: mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64 mount -t ext4 -o dirsync /dev/vdc /vdc cd /vdc mkdir file0 cd file0 touch file0 touch file1 attr -s BurnSpaceInEA -V abcde . touch supercalifragilisticexpialidocious
How to fix
- Linux Linuxb4fa4768c9acff77245d672d855d2c88294850b1, 5f8b55136ad787aed2c184f7cb3e93772ae637a3, 640c8c365999c6f23447ac766437236ad88317c5, 665cc3ba50330049524c1d275bc840a8f28dde73, 0b1c4357bb21d9770451a1bdb8d419ea10bada88, 804de0c72cd473e186ca4e1f6287d45431b14e5a, f4ce24f54d9cca4f09a395f3eecce20d6bec4663 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < b4fa4768c9acff77245d672d855d2c88294850b1, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < 5f8b55136ad787aed2c184f7cb3e93772ae637a3, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < 640c8c365999c6f23447ac766437236ad88317c5, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < 665cc3ba50330049524c1d275bc840a8f28dde73, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < 0b1c4357bb21d9770451a1bdb8d419ea10bada88, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < 804de0c72cd473e186ca4e1f6287d45431b14e5a, 3c47d54170b6a678875566b1b8d6dcf57904e49b ≤ v < f4ce24f54d9cca4f09a395f3eecce20d6bec4663, 3.8 | b4fa4768c9acff77245d672d855d2c88294850b1, 5f8b55136ad787aed2c184f7cb3e93772ae637a3, 640c8c365999c6f23447ac766437236ad88317c5, 665cc3ba50330049524c1d275bc840a8f28dde73, 0b1c4357bb21d9770451a1bdb8d419ea10bada88, 804de0c72cd473e186ca4e1f6287d45431b14e5a, f4ce24f54d9cca4f09a395f3eecce20d6bec4663 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.