Linux Kernel Zone Write Plug Deadlock Vulnerability

Vulnerability

A potential deadlock vulnerability has been identified in the Linux kernel's handling of zoned block device writes. The issue arises during the error recovery process for zone write plugging, which is designed to manage writes to specific zones by ensuring the correct tracking of write pointers. When a write operation fails, the system schedules a zone report to correct the tracking. However, if a device queue freeze is initiated while write operations are still plugged and one fails, the reporting process can block, leading to a deadlock. This occurs because the plugged write operations hold a reference that prevents the queue freeze from completing, causing a standstill in processing the plugged writes.

Impact

Exploitation of this vulnerability leads to a deadlock, where the system becomes unresponsive due to conflicting operations that cannot be resolved.

Remediation

The vulnerability has been addressed by removing the automatic error recovery from the zone write plugging code. Users are now required to manually execute zone report, reset, finish, or disk revalidation operations after a write failure, which is a common practice for file systems that revert to read-only after encountering write errors.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.