Linux Kernel XFS Filesystem Quota Management Vulnerability Leading to Denial-of-Service

Vulnerability

A vulnerability in the Linux kernel's XFS filesystem has been identified, related to improper quota management during error handling. When a link operation fails due to metadata I/O errors, the system attempts to unmount the filesystem but gets stuck because it fails to unlock the inodes that were being processed. This issue can lead to a system hang, requiring manual intervention to resolve.

Impact

Exploitation of this vulnerability causes the system to hang indefinitely while trying to unmount the filesystem, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by applying a specific filesystem patch that triggers a quota reservation failure during a link operation, while also introducing metadata I/O errors. This sequence of events causes the filesystem to shut down and the system to become stuck in the unmount process, unable to unlock the inodes that were being purged.

Remediation

Users experiencing this issue should manually unmount the affected filesystem and run the 'xfs_repair' utility to address the corruption before remounting.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.