Linux Kernel ext4 Deadlock Vulnerability in Inline Directory Conversion

Vulnerability

A deadlock vulnerability has been identified in the Linux kernel's ext4 file system, specifically when converting inline directories in no journal mode. The issue arises in the function ext4_finish_convert_inline_dir(), which can self-deadlock by calling ext4_handle_dirty_dirblock() while already holding the directory lock. A similar deadlock occurs in ext4_convert_inline_data_nolock() for data files. This vulnerability affects the Linux kernel ext4 file system in no journal mode.

Impact

Exploitation of this vulnerability leads to a self-imposed deadlock, causing the system to hang indefinitely while attempting to resolve the lock contention.

Reproduction

The vulnerability can be reproduced by creating an ext2 file system with inline data support, mounting it as ext4 with directory synchronization, and then manipulating files in a way that triggers the deadlock during the inline directory conversion process.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.

Added: Dec 30, 2025, 2:01 PM
Updated: Dec 30, 2025, 2:01 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.9
remediation
7.7
relevance
1.8
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.