CVE-2024-40969: f2fs: don't set RO when shutting down f2fs
In the Linux kernel, the following vulnerability has been resolved:
f2fs: don't set RO when shutting down f2fs
Shutdown does not check the error of thawsuper due to readonly, which causes a deadlock like below.
f2fsiocshutdown(F2FSGOINGDOWNFULLSYNC) issuediscardthread - bdevfreeze - freezesuper - f2fsstopcheckpoint() - f2fshandlecriticalerror - sbstartwrite - set RO - waiting - bdevthaw - thawsuperlocked - return -EINVAL, if sbrdonly() - f2fsstopdiscardthread -> wait for kthreadstop(discardthread);
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40969?
CVE-2024-40969 has been classified as a high-severity vulnerability due to its potential to cause deadlocks.
How do I fix CVE-2024-40969?
To fix CVE-2024-40969, update the Linux kernel to version 6.12.12-1, 6.12.13-1, or any version above 6.6.36.
Which versions of the Linux kernel are affected by CVE-2024-40969?
CVE-2024-40969 affects Linux kernel versions prior to 6.7 and between 6.7 and 6.6.36.
Is CVE-2024-40969 specific to any Linux distributions?
Yes, CVE-2024-40969 is particularly noted in Debian's Linux packages and requires upgrades to certain versions to mitigate the vulnerability.
What components are involved in CVE-2024-40969?
CVE-2024-40969 primarily involves the f2fs file system within the Linux kernel.