CVE-2024-45003

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

vfs: Don't evict inode under the inode lru traversing context

The inode reclaiming process(See function prune_icache_sb) collects all

reclaimable inodes and mark them with I_FREEING flag at first, at that

time, other processes will be stuck if they try getting these inodes

(See function find_inode_fast), then the reclaiming process destroy the

inodes by function dispose_list(). Some filesystems(eg. ext4 with

ea_inode feature, ubifs with xattr) may do inode lookup in the inode

evicting callback function, if the inode lookup is operated under the

inode lru traversing context, deadlock problems may happen.

Case 1: In function ext4_evict_inode(), the ea inode lookup could happen

if ea_inode feature is enabled, the lookup process will be stuck

under the evicting context like this:

1. File A has inode i_reg and an ea inode i_ea

2. getfattr(A, xattr_buf) // i_ea is added into lru // lru->i_ea

3. Then, followin

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References