Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-50436

ext4: don't set up encryption key during jbd2 transaction

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set up encryption key during jbd2 transaction Commit a80f7fcf1867 ("ext4: fixup ext4_fc_track_* functions' signature") extended the scope of the transaction in ext4_unlink() too far, making it include the call to ext4_find_entry(). However, ext4_find_entry() can deadlock when called from within a transaction because it may need to set up the directory's encryption key. Fix this by restoring the transaction to its original scope.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a80f7fcf18672ae4971a6b713b58c0d389aa99fe to < 23ad034760dd38e12b0e0e1b28b9629f330810a1affected
  • a80f7fcf18672ae4971a6b713b58c0d389aa99fe to < 6220ec405571ded17efedc56587190b542adf246affected
  • a80f7fcf18672ae4971a6b713b58c0d389aa99fe to < 206dd3acfb9bca54a25b228c7c7c2257eedde09baffected
  • a80f7fcf18672ae4971a6b713b58c0d389aa99fe to < 1ba993208bcfd691e241483420a2a761d3f15750affected
  • a80f7fcf18672ae4971a6b713b58c0d389aa99fe to < 4c0d5778385cb3618ff26a561ce41de2b7d9de70affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.163 to ≤ 5.10.*unaffected
  • 5.15.87 to ≤ 5.15.*unaffected
  • 6.0.18 to ≤ 6.0.*unaffected
  • 6.1.4 to ≤ 6.1.*unaffected
  • 6.2 to ≤ *unaffected

References