Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid journaling sb update on error if journal is destroying
Presently we always BUG_ON if trying to start a transaction on a journal marked
with JBD2_UNMOUNT, since this should never happen. However, while ltp running
stress tests, it was observed that in case of some error handling paths, it is
possible for update_super_work to start a transaction after the journal is
destroyed eg:
(umount)
ext4_kill_sb
kill_block_super
generic_shutdown_super
sync_filesystem /* commits all txns */
evict_inodes
/* might start a new txn */
ext4_put_super
flush_work(&sbi->s_sb_upd_work) /* flush the workqueue */
jbd2_journal_destroy
journal_kill_thread
journal->j_flags |= JBD2_UNMOUNT;
jbd2_journal_commit_transaction
jbd2_journal_get_descriptor_buffer
jbd2_journal_bmap
ext4_journal_bmap
ext4_map_blocks
...
ext4_inode_error
ext4_handle_error
schedule_work(&sbi->s_sb_upd_work)
/* work queue kicks in */
update_super_work
jbd2_journal_start
start_this_handle
BUG_ON(journal->j_flags &
JBD2_UNMOUNT)
Hence, introduce a new mount flag to indicate journal is destroying and only do
a journaled (and deferred) update of sb if this flag is not set. Otherwise, just
fallback to an un-journaled commit.
Further, in the journal destroy path, we have the following sequence:
1. Set mount flag indicating journal is destroying
2. force a commit and wait for it
3. flush pending sb updates
This sequence is important as it ensures that, after this point, there is no sb
update that might be journaled so it is safe to update the sb outside the
journal. (To avoid race discussed in 2d01ddc86606)
Also, we don't need a similar check in ext4_grp_locked_error since it is only
called from mballoc and AFAICT it would be always valid to schedule work here.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.11 | 6.6.160 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.16.3-1 | — |
| Debian 13 | linux | 6.12.48-1 | DSA-6008-1 |
| Debian 12 | linux | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1017.21 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | No fix yet | — |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.04 | linux | 6.14.0-22.22 | USN-7594-1 |
| Ubuntu 25.04 | linux-aws +3 | 6.14.0-1007.7 | USN-7594-3, USN-7594-2, USN-7594-1 |
| Ubuntu 25.04 | linux-gcp | 6.14.0-1008.8 | USN-7594-1 |
| Ubuntu 25.04 | linux-realtime | 6.14.0-1004.4 | USN-7594-1 |
| Ubuntu 24.04 LTS | linux | 6.8.0-106.106 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1050.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1051.57 | USN-8125-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1052.55 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1048.53 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1035.38 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1049.49 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-intel +10 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-106.106.1 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1049.52 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1049.52.1 | USN-8100-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1020.20 | — |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1047.48 | USN-8095-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1050.54 | USN-8095-5 |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1028.29 | USN-8261-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +49 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1050.53~22.04.1 | USN-8095-4 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1051.57~22.04.1 | USN-8126-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1052.55~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-106.106~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1049.49~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-106.106.1~22.04.1 | USN-8095-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1049.52~22.04.1 | USN-8100-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1047.48~22.04.1 | USN-8095-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2040.41 | USN-8095-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1045.46 | USN-8095-3 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1045.46~22.04.1 | USN-8095-3 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1050.53+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1052.58+fips1 | USN-8165-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-106.106+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1052.55+fips1 | USN-8095-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 +10 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-55.25.1.el10_0 | RHSA-2025:12662 |
| RHEL 9 | rv +77 | 5.14.0-570.30.1.el9_6 | RHSA-2025:11861 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | bpftool | 7.3.0-427.79.1.el9_4 | RHSA-2025:11810 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.79.1.el9_4 | RHSA-2025:11810 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.128.1.rt14.413.el9_2 | RHSA-2025:12311 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.128.1.el9_2 | RHSA-2025:12209 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.140.1.rt21.212.el9_0 | RHSA-2025:12525 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.140.1.el9_0 | RHSA-2025:12526 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-55.25.1.el10_0 | ALSA-2025:12662 |
| AlmaLinux 9 | rv +75 | 5.14.0-570.30.1.el9_6 | ALSA-2025:11861 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-55.25.1.el10_0 | RLSA-2025:12662 |
| Rocky Linux 9 | kernel | 5.14.0-570.30.1.el9_6 | RLSA-2025:11861 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +6 | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 |
| SLES 15 SP7 | kernel-azure +2 | 6.4.0-150700.20.6.1 | SUSE-SU-2025:02254-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.6.1.150700.17.6.1 | SUSE-SU-2025:02307-1 |
| SLES 15 SP6 | kernel-64kb +3 | 6.4.0-150600.23.60.4 | SUSE-SU-2025:02538-1 |
| SLES 15 SP6 | kernel-azure +2 | 6.4.0-150600.8.43.1 | SUSE-SU-2025:02249-1 |
| SLES 15 SP6 | kernel-coco +3 | 6.4.0-15061.28.coco15sp6.1 | SUSE-SU-2025:02923-1 |
| SLES 15 SP6 | kernel-default | 6.4.0-150600.23.60.5 | SUSE-SU-2025:02538-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.60.5.150600.12.26.4 | SUSE-SU-2025:02538-1 |
| SLES 15 SP6 | kernel-docs +1 | 6.4.0-150600.23.60.3 | SUSE-SU-2025:02538-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 6.1 | kernel-rt +1 | 6.4.0-33.1 | SUSE-SU-2025:20421-1 |
| SLE Micro 6.0 | kernel-rt +1 | 6.4.0-33.1 | SUSE-SU-2025:20413-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.6.1 | SUSE-SU-2025:02307-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_2 | 1-150700.1.5.1 | SUSE-SU-2025:02333-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_2 | 1-150700.15.3.1 | SUSE-SU-2025:02307-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.60.5 | SUSE-SU-2025:02538-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_13 | 1-150600.1.5.1 | SUSE-SU-2025:02335-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_13 | 1-150600.13.6.4 | SUSE-SU-2025:02538-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.8.1 | SUSE-SU-2025:02333-1 |
| SUSE Real Time Module 15 SP6 | kernel-rt +3 | 6.4.0-150600.10.44.1 | SUSE-SU-2025:02335-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.6 | dtb-aarch64 +2 | 6.4.0-150600.23.60.3 | SUSE-SU-2025:02538-1 |
| openSUSE Leap 15.6 | kernel-64kb +5 | 6.4.0-150600.23.60.4 | SUSE-SU-2025:02538-1 |
| openSUSE Leap 15.6 | kernel-azure +2 | 6.4.0-150600.8.43.1 | SUSE-SU-2025:02249-1 |
| openSUSE Leap 15.6 | kernel-default | 6.4.0-150600.23.60.5 | SUSE-SU-2025:02538-1 |
| openSUSE Leap 15.6 | kernel-default-base | 6.4.0-150600.23.60.5.150600.12.26.4 | SUSE-SU-2025:02538-1 |
| openSUSE Leap 15.6 | kernel-obs-qa | 6.4.0-150600.23.60.2 | SUSE-SU-2025:02538-1 |
| openSUSE Leap 15.6 | kernel-rt +3 | 6.4.0-150600.10.44.1 | SUSE-SU-2025:02335-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.12.46-66.121 | 1:1.0-0.amzn2023 | ALAS2023-2025-1208 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.46-66.121.amzn2023 | ALAS2023-2025-1208 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | No fix yet | — |
| Azure Linux 2 (CBL-Mariner) | kernel | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +28 | 6.12.0-55.25.1.0.1.el10_0 | ELSA-2025-12662 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-105.51.5.el10uek | ELSA-2025-25754 |
| Oracle Linux 9 | rv +28 | 5.14.0-570.30.1.0.1.el9_6 | ELSA-2025-11861 |
Advisories 40
- WID-SEC-2025-0844 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8100-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8165-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8126-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8125-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-4 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8095-3 linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- ALSA-2025:11861 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:12662 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:11861 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2025:12662 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 19, 2026
- RHSA-2025:12311 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Sep 19, 2026
- RHSA-2025:12209 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 19, 2026
- WID-SEC-2025-2855 IBM DataPower Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- RHSA-2025:11810 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Sep 17, 2026
- USN-8261-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Sep 7, 2026
- RHSA-2025:12526 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2025:12525 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- SUSE-SU-2025:20421-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20413-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02335-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02254-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02333-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02307-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- DSA-6008-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2025:02249-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- USN-7594-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Feb 4, 2026
- USN-7594-1 linux, linux-gcp, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Feb 4, 2026
- SUSE-SU-2025:02923-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:02538-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- USN-7594-3 linux-aws, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Feb 4, 2026
- ELSA-2025-25754 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 9, 2025
- ALAS2023-2025-1208 Important: kernel6.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 18, 2025
- RLSA-2025:11861 Moderate: kernel security update Rocky Linux Security Advisories · Oct 7, 2025
- RLSA-2025:12662 Important: kernel security update Rocky Linux Security Advisories · Oct 3, 2025
- ELSA-2025-12662 Important: kernel security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Aug 8, 2025
- ELSA-2025-11861 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 29, 2025