CVE-2023-53564

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix defrag path triggering jbd2 ASSERT

code path:

ocfs2_ioctl_move_extents

ocfs2_move_extents

ocfs2_defrag_extent

__ocfs2_move_extent

+ ocfs2_journal_access_di

+ ocfs2_split_extent //sub-paths call jbd2_journal_restart

+ ocfs2_journal_dirty //crash by jbs2 ASSERT

crash stacks:

PID: 11297 TASK: ffff974a676dcd00 CPU: 67 COMMAND: "defragfs.ocfs2"

#0 [ffffb25d8dad3900] machine_kexec at ffffffff8386fe01

#1 [ffffb25d8dad3958] __crash_kexec at ffffffff8395959d

#2 [ffffb25d8dad3a20] crash_kexec at ffffffff8395a45d

#3 [ffffb25d8dad3a38] oops_end at ffffffff83836d3f

#4 [ffffb25d8dad3a58] do_trap at ffffffff83833205

#5 [ffffb25d8dad3aa0] do_invalid_op at ffffffff83833aa6

#6 [ffffb25d8dad3ac0] invalid_op at ffffffff84200d18

[exception RIP: jbd2_journal_dirty_metadata+0x2ba]

RIP: ffffffffc09ca54a RSP: ffffb25d8dad3b70 RFLAGS: 00010207

RAX: 0000000000000000 RBX: ffff9706eedc524

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References