VDB

CVE-2024-50006

CVE-2024-50006 PUBLISHED

ext4: fix i_data_sem unlock order in ext4_ind_migrate()

Reported by linux · Published October 21, 2024

In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_data_sem unlock order in ext4_ind_migrate() Fuzzing reports a possible deadlock in jbd2_log_wait_commit. This issue is triggered when an EXT4_IOC_MIGRATE ioctl is set to require synchronous updates because the file descriptor is opened with O_SYNC. This can lead to the jbd2_journal_stop() function calling jbd2_might_wait_for_commit(), potentially causing a deadlock if the EXT4_IOC_MIGRATE call races with a write(2) system call. This problem only arises when CONFIG_PROVE_LOCKING is enabled. In this case, the jbd2_might_wait_for_commit macro locks jbd2_handle in the jbd2_journal_stop function while i_data_sem is locked. This triggers lockdep because the jbd2_journal_start function might also lock the same jbd2_handle simultaneously. Found by Linux Verification Center (linuxtesting.org) with syzkaller. Rule: add

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
kernel-libbpf-develAmazon Linux6.1.115-126.197.amzn2023
python3-perfAmazon Linux6.1.115-126.197.amzn2023
kernel-tools-develAmazon Linux6.1.115-126.197.amzn2023
kernel-livepatch-6.1.115-126.197Amazon Linux1.0-0.amzn2023
kernel-develAmazon Linux6.1.115-126.197.amzn2023
kernelAmazon Linux6.1.115-126.197.amzn2023
linux_kernellinux6.11.3, 6.10.14, 6.6.55, 6.1.113, 5.15.168, 5.10.227
SIPLUS S7-1500 CPU 1518-4 PN/DP MFPSiemens3.1.5

Affected products

VendorProductVersions
LinuxLinuxe8238f9a8339b3578c85e4192a7a23bc2bdc0333, e8238f9a8339b3578c85e4192a7a23bc2bdc0333, e8238f9a8339b3578c85e4192a7a23bc2bdc0333
LinuxLinux3.10, 0, 4.19.323
amazon:2023kernel-libbpf-devel0
amazon:2023python3-perf0
amazon:2023kernel-tools-devel0
amazon:2023kernel-livepatch-6.1.115-126.1970
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP3.1.0
amazon:2023kernel-devel0
amazon:2023kernel0
linuxlinux_kernel3.10, 3.10, 3.10
LinuxLinux3.10, 5.15.168, 5.10.227
amazon:2023bpftool0
SiemensSCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family0
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP3.1.0
amazon:2023kernel-modules-extra-common0
SiemensSCALANCE XCM-/XRM-/XCH-/XRH-300 family0
amazon:2023kernel-headers0
SiemensRUGGEDCOM RST2428P0
amazon:2023kernel-tools0
amazon:2023kernel-libbpf0

…and 5 more

Timeline

  • Oct 21, 2024 CVE Published
  • Oct 22, 2024 EPSS Score (30 in total, the first dated here)
  • Oct 23, 2024 Coalition ESS Score (10 in total, the first dated here)
  • Jan 6, 2025 CVE Updated
  • Dec 16, 2025 PoC Published
  • Jan 2, 2026 Security Advisory (475 in total, the first dated here)
  • Mar 30, 2026 Distribution Patch (406 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-50006
vulnetix vdb fixes CVE-2024-50006

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-50006/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›