In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_f…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: quota: flush quota_release_work upon quota writeback One of the paths quota writeback is called from is: freeze_super() sync_filesystem() ext4_sync_fs() dquot_writeback_dquots() Since we currently don't always flush the quota_release_work queue in this path, we can end up with the following race: 1. dquot are added to releasing_dquots list during regular operations. 2. FS Freeze starts, however, this does not…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/3e6ff207cd5bd924ad94cd1a7c633bcdac0ba1cb Patch
- https://git.kernel.org/stable/c/6f3821acd7c3143145999248087de5fb4b48cf26 Patch
- https://git.kernel.org/stable/c/8ea87e34792258825d290f4dc5216276e91cb224 Patch
- https://git.kernel.org/stable/c/a5abba5e0e586e258ded3e798fe5f69c66fec198 Patch
- https://git.kernel.org/stable/c/ab6cfcf8ed2c7496f55d020b65b1d8cd55d9a2cb Patch
- https://git.kernel.org/stable/c/ac6f420291b3fee1113f21d612fa88b628afab5b Patch
- https://git.kernel.org/stable/c/bcacb52a985f1b6d280f698a470b873dfe52728a Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD