-

CVE-2023-54099

In the Linux kernel, the following vulnerability has been resolved:

fs: Protect reconfiguration of sb read-write from racing writes

The reconfigure / remount code takes a lot of effort to protect
filesystem's reconfiguration code from racing writes on remounting
read-only. However during remounting read-only filesystem to read-write
mode userspace writes can start immediately once we clear SB_RDONLY
flag. This is inconvenient for example for ext4 because we need to do
some writes to the filesystem (such as preparation of quota files)
before we can take userspace writes so we are clearing SB_RDONLY flag
before we are fully ready to accept userpace writes and syzbot has found
a way to exploit this [1]. Also as far as I'm reading the code
the filesystem remount code was protected from racing writes in the
legacy mount path by the mount's MNT_READONLY flag so this is relatively
new problem. It is actually fairly easy to protect remount read-write
from racing writes using sb->s_readonly_remount flag so let's just do
that instead of having to workaround these races in the filesystem code.

[1] https://lore.kernel.org/all/00000000000006a0df05f6667499@google.com/T/
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 0336b42456e485fda1006b5b411e7372e20fbf03
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
Version < 7e4e87ec56aa6d008c64eab31b340a7c452b26cc
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
Version < 0ccfe21949bc9f706a86ee7351b74375c0745757
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
Version < 295ef44a2abaf97d7a594b1d4c60d4be3738191f
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
Version < 4abda85197ba5d695e6040d580b4b409ce0d3733
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
Version < c541dce86c537714b6761a79a969c1623dfa222b
Version 8d0347f6c3a9d4953ddd636a31c6584da082e084
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 5.1
Status affected
Version < 5.1
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.253
Status unaffected
Version <= 5.10.*
Version 5.10.190
Status unaffected
Version <= 5.15.*
Version 5.15.126
Status unaffected
Version <= 6.1.*
Version 6.1.45
Status unaffected
Version <= 6.4.*
Version 6.4.10
Status unaffected
Version <= *
Version 6.5
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.