Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: add error checking to ext4_ext_replay_set_iblocks()
If the call to ext4_map_blocks() fails due to an corrupted file
system, ext4_ext_replay_set_iblocks() can get stuck in an infinite
loop. This could be reproduced by running generic/526 with a file
system that has inline_data and fast_commit enabled. The system will
repeatedly log to the console:
EXT4-fs warning (device dm-3): ext4_block_to_path:105: block 1074800922 > max in inode 131076
and the stack that it gets stuck in is:
ext4_block_to_path+0xe3/0x130
ext4_ind_map_blocks+0x93/0x690
ext4_map_blocks+0x100/0x660
skip_hole+0x47/0x70
ext4_ext_replay_set_iblocks+0x223/0x440
ext4_fc_replay_inode+0x29e/0x3b0
ext4_fc_replay+0x278/0x550
do_one_pass+0x646/0xc10
jbd2_journal_recover+0x14a/0x270
jbd2_journal_load+0xc4/0x150
ext4_load_journal+0x1f3/0x490
ext4_fill_super+0x22d4/0x2c00
With this patch, generic/526 still fails, but system is no longer
locking up in a tight loop. It's likely the root casue is that
fast_commit replay is corrupting file systems with inline_data, and we
probably need to add better error handling in the fast commit replay
code path beyond what is done here, which essentially just breaks the
infinite loop without reporting the to the higher levels of the code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.10 | 5.10.71 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.14.12-1 | — |
| Debian 13 | linux | 5.14.12-1 | — |
| Debian 12 | linux | 5.14.12-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-riscv +20 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.57.1 | SUSE-SU-2024:2019-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
| SLES 15 SP4 | kernel-64kb +4 | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SLES 15 SP4 | kernel-syms +1 | 5.14.21-150400.24.122.1 | SUSE-SU-2024:2189-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SLES for SAP 15 SP4 | kernel-docs +2 | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLES for SAP 15 SP4 | kernel-syms +1 | 5.14.21-150400.24.122.1 | SUSE-SU-2024:2189-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.82.1 | SUSE-SU-2024:2011-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.82.1 | SUSE-SU-2024:2011-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 +1 | 1-150500.11.3.1 | SUSE-SU-2024:2190-1, SUSE-SU-2024:2008-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_27 | 1-150400.9.3.2 | SUSE-SU-2024:2189-1 |
| SLE HPC 15 SP4 | kernel-64kb +3 | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SLE HPC 15 SP4 | kernel-syms +1 | 5.14.21-150400.24.122.1 | SUSE-SU-2024:2189-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
| SUSE Manager Server 4.3 | kernel-default +1 | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SUSE Manager Server 4.3 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SUSE Manager Server 4.3 | kernel-syms +1 | 5.14.21-150400.24.122.1 | SUSE-SU-2024:2189-1 |
| SUSE Manager Proxy 4.3 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| SUSE Manager Proxy 4.3 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| SUSE Manager Proxy 4.3 | kernel-syms +1 | 5.14.21-150400.24.122.1 | SUSE-SU-2024:2189-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +10 | 5.14.21-150500.55.68.1 | SUSE-SU-2024:2190-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.57.1 | SUSE-SU-2024:2019-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.68.1.150500.6.31.1 | SUSE-SU-2024:2190-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.58.1 | SUSE-SU-2024:2008-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| openSUSE Leap Micro 5.4 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| openSUSE Leap Micro 5.4 | kernel-rt | 5.14.21-150400.15.82.1 | SUSE-SU-2024:2011-1 |
| openSUSE Leap Micro 5.3 | kernel-default | 5.14.21-150400.24.122.2 | SUSE-SU-2024:2189-1 |
| openSUSE Leap Micro 5.3 | kernel-default-base | 5.14.21-150400.24.122.2.150400.24.58.2 | SUSE-SU-2024:2189-1 |
| openSUSE Leap Micro 5.3 | kernel-rt | 5.14.21-150400.15.82.1 | SUSE-SU-2024:2011-1 |
Advisories 6
- WID-SEC-2024-1197 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe BSI CERT-Bund (WID) · Nov 9, 2026
- SUSE-SU-2024:2019-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2189-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2011-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026