Skip to content
OpenAdvisories
Unscored CVE-2023-53089 EUVD-2025-13160GHSA-p8rf-745w-8wvv

ext4: fix task hung in ext4_xattr_delete_inode

Published May 2, 2025 · Updated Nov 5, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-nvidia Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.5 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix task hung in ext4_xattr_delete_inode

Syzbot reported a hung task problem:
==================================================================
INFO: task syz-executor232:5073 blocked for more than 143 seconds.
Not tainted 6.2.0-rc2-syzkaller-00024-g512dee0c00ad #0
"echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
task:syz-exec232 state:D stack:21024 pid:5073 ppid:5072 flags:0x00004004
Call Trace:
<TASK>
context_switch kernel/sched/core.c:5244 [inline]
__schedule+0x995/0xe20 kernel/sched/core.c:6555
schedule+0xcb/0x190 kernel/sched/core.c:6631
__wait_on_freeing_inode fs/inode.c:2196 [inline]
find_inode_fast+0x35a/0x4c0 fs/inode.c:950
iget_locked+0xb1/0x830 fs/inode.c:1273
__ext4_iget+0x22e/0x3ed0 fs/ext4/inode.c:4861
ext4_xattr_inode_iget+0x68/0x4e0 fs/ext4/xattr.c:389
ext4_xattr_inode_dec_ref_all+0x1a7/0xe50 fs/ext4/xattr.c:1148
ext4_xattr_delete_inode+0xb04/0xcd0 fs/ext4/xattr.c:2880
ext4_evict_inode+0xd7c/0x10b0 fs/ext4/inode.c:296
evict+0x2a4/0x620 fs/inode.c:664
ext4_orphan_cleanup+0xb60/0x1340 fs/ext4/orphan.c:474
__ext4_fill_super fs/ext4/super.c:5516 [inline]
ext4_fill_super+0x81cd/0x8700 fs/ext4/super.c:5644
get_tree_bdev+0x400/0x620 fs/super.c:1282
vfs_get_tree+0x88/0x270 fs/super.c:1489
do_new_mount+0x289/0xad0 fs/namespace.c:3145
do_mount fs/namespace.c:3488 [inline]
__do_sys_mount fs/namespace.c:3697 [inline]
__se_sys_mount+0x2d3/0x3c0 fs/namespace.c:3674
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd
RIP: 0033:0x7fa5406fd5ea
RSP: 002b:00007ffc7232f968 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa5406fd5ea
RDX: 0000000020000440 RSI: 0000000020000000 RDI: 00007ffc7232f970
RBP: 00007ffc7232f970 R08: 00007ffc7232f9b0 R09: 0000000000000432
R10: 0000000000804a03 R11: 0000000000000202 R12: 0000000000000004
R13: 0000555556a7a2c0 R14: 00007ffc7232f9b0 R15: 0000000000000000
</TASK>
==================================================================

The problem is that the inode contains an xattr entry with ea_inum of 15
when cleaning up an orphan inode <15>. When evict inode <15>, the reference
counting of the corresponding EA inode is decreased. When EA inode <15> is
found by find_inode_fast() in __ext4_iget(), it is found that the EA inode
holds the I_FREEING flag and waits for the EA inode to complete deletion.
As a result, when inode <15> is being deleted, we wait for inode <15> to
complete the deletion, resulting in an infinite loop and triggering Hung
Task. To solve this problem, we only need to check whether the ino of EA
inode and parent is the same before getting EA inode.

Affected products

VendorProductAffectedFixed
Linux Linux 4.13 4.14.311

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 6.1.25-1 —
Debian 13 linux 6.1.25-1 —
Debian 12 linux 6.1.25-1 —
ReleasePackageFixed inAdvisory
Ubuntu Nvidia-BlueField 22.04 LTS linux-bluefield 5.15.0-1022.24 —
Ubuntu 24.04 LTS linux-realtime +1 No fix yet —
Ubuntu 22.04 LTS linux 5.15.0-79.86 —
Ubuntu 22.04 LTS linux-aws 5.15.0-1042.47 —
Ubuntu 22.04 LTS linux-azure 5.15.0-1045.52 —
Ubuntu 22.04 LTS linux-azure-fde 5.15.0-1045.52.1 —
Ubuntu 22.04 LTS linux-gcp 5.15.0-1039.47 —
Ubuntu 22.04 LTS linux-gke +1 5.15.0-1039.44 —
Ubuntu 22.04 LTS linux-gkeop 5.15.0-1025.30 —
Ubuntu 22.04 LTS linux-ibm +1 5.15.0-1035.38 —
Ubuntu 22.04 LTS linux-intel-iotg 5.15.0-1037.42 —
Ubuntu 22.04 LTS linux-lowlatency 5.15.0-79.88 —
Ubuntu 22.04 LTS linux-nvidia 5.15.0-1030.30 —
Ubuntu 22.04 LTS linux-nvidia-tegra 5.15.0-1016.16 —
Ubuntu 22.04 LTS linux-nvidia-tegra-igx 5.15.0-1002.2 —
Ubuntu 22.04 LTS linux-oracle 5.15.0-1040.46 —
Ubuntu 22.04 LTS linux-riscv +31 No fix yet —
Ubuntu 22.04 LTS linux-xilinx-zynqmp 5.15.0-1025.29 —
Ubuntu 20.04 LTS linux 5.4.0-156.173 —
Ubuntu 20.04 LTS linux-aws 5.4.0-1107.115 —
Ubuntu 20.04 LTS linux-aws-5.15 5.15.0-1041.46~20.04.1 —
Ubuntu 20.04 LTS linux-azure 5.4.0-1114.120 —
Ubuntu 20.04 LTS linux-azure-5.15 5.15.0-1045.52~20.04.1 —
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1068.74 —
Ubuntu 20.04 LTS linux-gcp 5.4.0-1110.119 —
Ubuntu 20.04 LTS linux-gcp-5.15 5.15.0-1039.47~20.04.1 —
Ubuntu 20.04 LTS linux-gke +28 No fix yet —
Ubuntu 20.04 LTS linux-hwe-5.15 5.15.0-79.86~20.04.2 —
Ubuntu 20.04 LTS linux-ibm 5.4.0-1054.59 —
Ubuntu 20.04 LTS linux-ibm-5.15 5.15.0-1036.39~20.04.1 —
Ubuntu 20.04 LTS linux-intel-iotg-5.15 5.15.0-1037.42~20.04.1 —
Ubuntu 20.04 LTS linux-iot 5.4.0-1019.20 —
Ubuntu 20.04 LTS linux-kvm 5.4.0-1096.102 —
Ubuntu 20.04 LTS linux-lowlatency-hwe-5.15 5.15.0-79.88~20.04.1 —
Ubuntu 20.04 LTS linux-nvidia-tegra-5.15 5.15.0-1016.16~20.04.1 —
Ubuntu 20.04 LTS linux-oracle 5.4.0-1106.115 —
Ubuntu 20.04 LTS linux-oracle-5.15 5.15.0-1040.46~20.04.1 —
Ubuntu 20.04 LTS linux-raspi 5.4.0-1091.102 —
Ubuntu 20.04 LTS linux-riscv-5.15 5.15.0-1038.42~20.04.2 —
Ubuntu 20.04 LTS linux-xilinx-zynqmp 5.4.0-1027.31 —
Ubuntu 18.04 LTS linux-gcp +14 No fix yet —
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro Realtime 22.04 LTS linux-intel-iot-realtime 5.15.0-1036.38 —
Ubuntu Pro Realtime 22.04 LTS linux-realtime 5.15.0-1043.48 —
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1107.115+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1113.119+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1082.91 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1110.119+fips1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS-preview 22.04 LTS linux-fips No fix yet —
Ubuntu Pro 18.04 LTS linux +5 No fix yet —
Ubuntu Pro 18.04 LTS linux-aws-5.4 5.4.0-1107.115~18.04.1 —
Ubuntu Pro 18.04 LTS linux-azure-5.4 5.4.0-1113.119~18.04.1 —
Ubuntu Pro 18.04 LTS linux-gcp-5.4 5.4.0-1110.119~18.04.1 —
Ubuntu Pro 18.04 LTS linux-hwe-5.4 5.4.0-156.173~18.04.1 —
Ubuntu Pro 18.04 LTS linux-ibm-5.4 5.4.0-1054.59~18.04.1 —
Ubuntu Pro 18.04 LTS linux-oracle-5.4 5.4.0-1106.115~18.04.1 —
Ubuntu Pro 18.04 LTS linux-raspi-5.4 5.4.0-1091.102~18.04.1 —
Ubuntu Pro 16.04 LTS linux-gcp +4 No fix yet —
Ubuntu Pro 14.04 LTS linux-azure No fix yet —
ReleasePackageFixed inAdvisory
RHEL 9 bpftool 7.2.0-362.8.1.el9_3 RHSA-2023:6583
RHEL 9 rv +64 5.14.0-362.8.1.el9_3 RHSA-2023:6583
RHEL 8 perf +26 4.18.0-553.el8_10 RHSA-2024:3138

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 kernel 4.18.0-553.123.1.el8_10.cloud.0.1 RXSA-2024:3138
ReleasePackageFixed inAdvisory
SLES 15 SP5 kernel-64kb +6 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLES 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLES 15 SP4 kernel-64kb +6 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLES 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLES for SAP 15 SP5 kernel-docs +4 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLES for SAP 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLES for SAP 15 SP4 kernel-docs +4 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLE Micro 5.5 kernel-rt +1 5.14.21-150500.13.97.1 SUSE-SU-2025:01966-1
SLE Micro 5.5 kernel-source +1 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE Micro 5.4 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLE Micro 5.4 kernel-rt +1 5.14.21-150400.15.121.1 SUSE-SU-2025:01918-1
SLE Micro 5.3 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Micro 5.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SLE Micro 5.3 kernel-rt +1 5.14.21-150400.15.121.1 SUSE-SU-2025:01918-1
SLE Live Patching 15 SP5 kernel-default 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_27 1-150500.11.7.1 SUSE-SU-2025:02173-1
SLE Live Patching 15 SP4 kernel-default 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_41 1-150400.9.3.1 SUSE-SU-2025:02262-1
SLE HPC 15 SP5 kernel-64kb +5 5.14.21-150500.55.110.1 SUSE-SU-2025:02173-1
SLE HPC 15 SP5 kernel-default-base 5.14.21-150500.55.110.1.150500.6.51.3 SUSE-SU-2025:02173-1
SLE HPC 15 SP4 kernel-64kb +5 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SLE HPC 15 SP4 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Server 4.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Server 4.3 kernel-syms +3 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1
SUSE Manager Proxy 4.3 kernel-default-base 5.14.21-150400.24.167.1.150400.24.84.1 SUSE-SU-2025:02262-1
SUSE Manager Proxy 4.3 kernel-syms +2 5.14.21-150400.24.167.1 SUSE-SU-2025:02262-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 kernel-livepatch-6.1.21-1.45 1.0-0.amzn2023 ALAS2023-2023-148
Amazon Linux 2023 perf +12 6.1.21-1.45.amzn2023 ALAS2023-2023-148
Amazon Linux 2 kernel-livepatch-4.14.311-233.529 1.0-0.amzn2 ALAS2-2025-2909, ALAS2-2025-2892
Amazon Linux 2 perf +8 4.14.311-233.529.amzn2 ALAS2-2025-2909, ALAS2-2025-2892

Advisories 10

References