Deadlock in Concurrent Rename Whiteout and Inode Writeback in ubifs
Summary
GSD-2022-1001442: ubifs: Fix deadlock in concurrent rename whiteout and inode writeback. Affects Kernel versions >= 9e0a1fff8db56eaaebb74b4a3ef65f86811c4798, < 70e9090acc32348cedc5def0cd6d5c126efc97b9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ubifs package is a file system designed for use on flash devices. It is a part of the Linux Kernel ecosystem. The package provides a file system that is optimized for flash memory, offering features such as wear-leveling and compression. However, a vulnerability has been discovered in the package that can lead to a deadlock when there is concurrent rename whiteout and inode writeback operations.
Vulnerability Detail
The vulnerability arises due to a deadlock situation that can occur when there are concurrent operations involving rename whiteout and inode writeback in the ubifs file system. This can potentially lead to system instability or crashes. The issue was introduced in version v4.9 of the Linux Kernel and has been fixed in version v5.16.19. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
In conclusion, the ubifs package in the Linux Kernel is vulnerable to a deadlock issue when there are concurrent rename whiteout and inode writeback operations. This vulnerability can potentially lead to system instability or crashes. It is recommended to update the Linux Kernel to version v5.16.19 or later to fix this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ubifs is a file system designed for use on flash devices. It provides features optimized for flash memory, such as wear-leveling and compression.
The vulnerability can potentially lead to system instability or crashes.
To fix this vulnerability, update the Linux Kernel to version v5.16.19 or later.
There is no specific workaround available. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
The updated Linux Kernel source code can be obtained from the official Linux Kernel repository at https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
