Linux Kernel ext4 Inline Data Migration Warning Vulnerability

Vulnerability

A vulnerability in the Linux kernel's ext4 file system has been addressed, which involved a warning triggered during the 'ext4_da_release_space' function. This warning occurred because the function attempted to free a block for an inode that had no reserved data blocks, indicating a mismatch in block management. The issue was reported by Syzkaller, a tool for finding bugs in kernel code.

Impact

The vulnerability could lead to kernel warnings and potential instability in the file system management.

Reproduction

The issue can be reproduced by creating an inode with inline data and then migrating it, which leads to a situation where the 'ext4_da_release_space' function is called to free blocks. Since the inode has no reserved data blocks, this triggers a warning about the inconsistency.

Remediation

The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version where this issue has been addressed.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.