Vulnerability in bcache: Avoid Journal No-Space Deadlock
Summary
GSD-2022-1002920: bcache: avoid journal no-space deadlock by reserving 1 journal bucket. Affects Kernel versions < 6332ea3e35efa12dc08f0cbf5faea5e6e8eb0497. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The bcache package is a component of the Linux Kernel that provides a block layer cache. It allows for caching of data from slower storage devices, such as hard disk drives, to faster storage devices, like solid-state drives. This caching mechanism improves overall system performance by reducing disk I/O operations. However, a vulnerability has been discovered in bcache that can lead to a deadlock situation when the journal runs out of space.
Vulnerability Detail
The vulnerability in bcache arises from a potential deadlock scenario when the journal bucket is completely filled. In this situation, if a write operation needs to allocate a new journal bucket but none are available, it can result in a deadlock. This deadlock can lead to a system freeze or crash, impacting the availability and stability of the system. The vulnerability has been identified and fixed in Linux Kernel version v5.17.14 by commit 6332ea3e35efa12dc08f0cbf5faea5e6e8eb0497.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in bcache that could lead to a deadlock situation when the journal runs out of space has been addressed in Linux Kernel version v5.17.14. It is recommended to update the kernel to this version or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Bcache is a component of the Linux Kernel that provides a block layer cache, improving system performance by caching data from slower storage devices to faster ones.
A journal bucket in bcache is a data structure used to store metadata related to write operations. It helps ensure data consistency and recoverability in case of system failures.
The deadlock in bcache occurs when the journal bucket is completely filled, and a write operation needs to allocate a new journal bucket but none are available. This results in a deadlock situation.
The potential consequences of this vulnerability include system freezes or crashes, impacting the availability and stability of the system.
Yes, the vulnerability has been fixed in Linux Kernel version v5.17.14 by commit 6332ea3e35efa12dc08f0cbf5faea5e6e8eb0497.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
