Linux Kernel Ext4 Denial-of-Service Vulnerability in Attribute Handling

A denial-of-service vulnerability has been identified in the Linux kernel's ext4 file system. The issue arises in the 'ext4_setattr()' function, where a failure in 'ext4_inode_attach_jinode()' can lead to a hung task. This occurs because 'filemap_invalidate_unlock()' is not called to release the 'mapping->invalidate_lock', causing tasks to be blocked for an extended period. The vulnerability has been observed in Linux kernel version 6.14.0-rc1.

Impact

Exploitation of this vulnerability leads to a hung task, where the process remains blocked for an extended period, causing potential disruptions in file system operations.