CVE-2022-50126

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted

Following process will fail assertion 'jh->b_frozen_data == NULL' in

jbd2_journal_dirty_metadata():

jbd2_journal_commit_transaction

unlink(dir/a)

jh->b_transaction = trans1

jh->b_jlist = BJ_Metadata

journal->j_running_transaction = NULL

trans1->t_state = T_COMMIT

unlink(dir/b)

handle->h_trans = trans2

do_get_write_access

jh->b_modified = 0

jh->b_frozen_data = frozen_buffer

jh->b_next_transaction = trans2

jbd2_journal_dirty_metadata

is_handle_aborted

is_journal_aborted // return false

--> jbd2 abort <--

while (commit_transaction->t_buffers)

if (is_journal_aborted)

jbd2_journal_refile_buffer

__jbd2_journal_refile_buffer

WRITE_ONCE(jh->b_transa

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References