CVE-2024-50191

ext4: don't set SB_RDONLY after filesystem errors

Medium · published November 8, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: don't set SB_RDONLY after filesystem errors

When the filesystem is mounted with errors=remount-ro, we were setting

SB_RDONLY flag to stop all filesystem modifications. We knew this misses

proper locking (sb->s_umount) and does not go through proper filesystem

remount procedure but it has been the way this worked since early ext2

days and it was good enough for catastrophic situation damage

mitigation. Recently, syzbot has found a way (see link) to trigger

warnings in filesystem freezing because the code got confused by

SB_RDONLY changing under its hands. Since these days we set

EXT4_FLAGS_SHUTDOWN on the superblock which is enough to stop all

filesystem modifications, modifying SB_RDONLY shouldn't be needed. So

stop doing that.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2024-11-08T05:43Z
EPSS history
Timeline
  • 08 NOV 05:43Z
    ext4: don't set SB_RDONLY after filesystem errors
    cvelistv5