CVE-2024-53052

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/rw: fix missing NOWAIT check for O_DIRECT start write

When io_uring starts a write, it'll call kiocb_start_write() to bump the

super block rwsem, preventing any freezes from happening while that

write is in-flight. The freeze side will grab that rwsem for writing,

excluding any new writers from happening and waiting for existing writes

to finish. But io_uring unconditionally uses kiocb_start_write(), which

will block if someone is currently attempting to freeze the mount point.

This causes a deadlock where freeze is waiting for previous writes to

complete, but the previous writes cannot complete, as the task that is

supposed to complete them is blocked waiting on starting a new write.

This results in the following stuck trace showing that dependency with

the write blocked starting a new write:

task:fio state:D stack:0 pid:886 tgid:886 ppid:876

Call trace:

__switch_to+0x1d8/0x348

__sche

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References