Circular Locking Dependency in Linux Kernel - bcachefs Package Vulnerability
Summary
DEBIAN-CVE-2024-26658: In the Linux kernel, the following vulnerability has been resolved: bcachefs: grab s_umount only if snapshotting When I was testing mongodb over bcachefs with compression, there is a lockdep warning when snapshotting mon... Affects linux versions < 6.7.7-1. Fixed in 6.7.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system, including process management, memory management, and device control. The bcachefs package is a filesystem that aims to provide high performance and reliability, particularly for workloads involving large amounts of data. However, it has recently been found to have a vulnerability that can lead to potential deadlocks during snapshot operations.
Vulnerability Detail
In the Linux kernel, specifically within the bcachefs filesystem, a vulnerability has been identified that involves a circular locking dependency when snapshotting data volumes. This issue arises when the system attempts to acquire multiple locks in a manner that can lead to a deadlock situation. The vulnerability can be triggered during operations involving MongoDB and bcachefs, where the system may hang indefinitely due to conflicting lock acquisition sequences. The warning messages generated during these operations indicate the potential for a deadlock, which can severely impact system stability and data integrity.
How To Fix
Minimum fixed version
6.7.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the snapshot feature of bcachefs while the vulnerability is being addressed. This can be done by refraining from executing commands that create snapshots until the system is updated with the patched version.
Conclusion
The identified vulnerability in the Linux kernel's bcachefs package poses significant risks related to system stability and data integrity due to potential deadlocks during snapshot operations. Users are advised to update their systems to the patched version to mitigate these risks. In the meantime, avoiding the use of the snapshot feature can serve as a temporary workaround.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a circular locking dependency that can lead to deadlocks during snapshot operations.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can cause the system to hang indefinitely, leading to potential data loss and instability.
Yes, a patched version (6.7.7-1) of the Linux package is available. Updating to this version will resolve the vulnerability.
As a temporary measure, avoid using the snapshot feature of bcachefs until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
