CVE-2024-49959

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

In __jbd2_log_wait_for_space(), we might call jbd2_cleanup_journal_tail()

to recover some journal space. But if an error occurs while executing

jbd2_cleanup_journal_tail() (e.g., an EIO), we don't stop waiting for free

space right away, we try other branches, and if j_committing_transaction

is NULL (i.e., the tid is 0), we will get the following complain:

============================================

JBD2: I/O error when updating journal superblock for sdd-8.

__jbd2_log_wait_for_space: needed 256 blocks and only had 217 space available

__jbd2_log_wait_for_space: no way to get more journal space in sdd-8

------------[ cut here ]------------

WARNING: CPU: 2 PID: 139804 at fs/jbd2/checkpoint.c:109 __jbd2_log_wait_for_space+0x251/0x2e0

Modules linked in:

CPU: 2 PID: 139804 Comm: kworker/u8:3 Not tainted 6.6.0+ #1

RIP: 0010:__jbd2_log_wait_for_spa

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References