CVE-2024-56744

一、漏洞信息
 漏洞编号：[CVE-2024-56744](https://nvd.nist.gov/vuln/detail/CVE-2024-56744)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()syzbot reports deadlock issue of f2fs as below:======================================================WARNING: possible circular locking dependency detected6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 Not tainted------------------------------------------------------kswapd0/79 is trying to acquire lock:ffff888011824088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_down_write fs/f2fs/f2fs.h:2199 [inline]ffff888011824088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_record_stop_reason+0x52/0x1d0 fs/f2fs/super.c:4068but task is already holding lock:ffff88804bd92610 (sb_internal#2){.+.+}-{0:0}, at: f2fs_evict_inode+0x662/0x15c0 fs/f2fs/inode.c:842which lock already depends on the new lock.the existing dependency chain (in reverse order) is:-> #2 (sb_internal#2){.+.+}-{0:0}:       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825       percpu_down_read include/linux/percpu-rwsem.h:51 [inline]       __sb_start_write include/linux/fs.h:1716 [inline]       sb_start_intwrite+0x4d/0x1c0 include/linux/fs.h:1899       f2fs_evict_inode+0x662/0x15c0 fs/f2fs/inode.c:842       evict+0x4e8/0x9b0 fs/inode.c:725       f2fs_evict_inode+0x1a4/0x15c0 fs/f2fs/inode.c:807       evict+0x4e8/0x9b0 fs/inode.c:725       dispose_list fs/inode.c:774 [inline]       prune_icache_sb+0x239/0x2f0 fs/inode.c:963       super_cache_scan+0x38c/0x4b0 fs/super.c:223       do_shrink_slab+0x701/0x1160 mm/shrinker.c:435       shrink_slab+0x1093/0x14d0 mm/shrinker.c:662       shrink_one+0x43b/0x850 mm/vmscan.c:4818       shrink_many mm/vmscan.c:4879 [inline]       lru_gen_shrink_node mm/vmscan.c:4957 [inline]       shrink_node+0x3799/0x3de0 mm/vmscan.c:5937       kswapd_shrink_node mm/vmscan.c:6765 [inline]       balance_pgdat mm/vmscan.c:6957 [inline]       kswapd+0x1ca3/0x3700 mm/vmscan.c:7226       kthread+0x2f0/0x390 kernel/kthread.c:389       ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244-> #1 (fs_reclaim){+.+.}-{0:0}:       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825       __fs_reclaim_acquire mm/page_alloc.c:3834 [inline]       fs_reclaim_acquire+0x88/0x130 mm/page_alloc.c:3848       might_alloc include/linux/sched/mm.h:318 [inline]       prepare_alloc_pages+0x147/0x5b0 mm/page_alloc.c:4493       __alloc_pages_noprof+0x16f/0x710 mm/page_alloc.c:4722       alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265       alloc_pages_noprof mm/mempolicy.c:2345 [inline]       folio_alloc_noprof+0x128/0x180 mm/mempolicy.c:2352       filemap_alloc_folio_noprof+0xdf/0x500 mm/filemap.c:1010       do_read_cache_folio+0x2eb/0x850 mm/filemap.c:3787       read_mapping_folio include/linux/pagemap.h:1011 [inline]       f2fs_commit_super+0x3c0/0x7d0 fs/f2fs/super.c:4032       f2fs_record_stop_reason+0x13b/0x1d0 fs/f2fs/super.c:4079       f2fs_handle_critical_error+0x2ac/0x5c0 fs/f2fs/super.c:4174       f2fs_write_inode+0x35f/0x4d0 fs/f2fs/inode.c:785       write_inode fs/fs-writeback.c:1503 [inline]       __writeback_single_inode+0x711/0x10d0 fs/fs-writeback.c:1723       writeback_single_inode+0x1f3/0x660 fs/fs-writeback.c:1779       sync_inode_metadata+0xc4/0x120 fs/fs-writeback.c:2849       f2fs_release_file+0xa8/0x100 fs/f2fs/file.c:1941       __fput+0x23f/0x880 fs/file_table.c:431       task_work_run+0x24f/0x310 kernel/task_work.c:228       resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]       exit_to_user_mode_loop kernel/entry/common.c:114 [inline]       exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]       __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]       syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218       do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89       entry_SYSCALL_64_after_hwframe+0x77/0x7f---truncated---
 漏洞公开时间：2024-12-29 20:15:07
 漏洞创建时间：2024-12-29 20:26:54
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-56744
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/1539a088b108996bcdaddb7775070b5163b14233 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/801092a2c9c251ef6a8678fcb8fcc1220474a697 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/ecf4e6782b01fd578b565b3dd2be7bb0ac91082e |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/f10a890308a7cd8794e21f646f09827c6cb4bf5d |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-56744 | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-56744 | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://git.kernel.org/stable/c/1539a088b108996bcdaddb7775070b5163b14233 | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://git.kernel.org/stable/c/801092a2c9c251ef6a8678fcb8fcc1220474a697 | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://git.kernel.org/stable/c/ecf4e6782b01fd578b565b3dd2be7bb0ac91082e | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://git.kernel.org/stable/c/f10a890308a7cd8794e21f646f09827c6cb4bf5d | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-56744.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2334821 | https://bugzilla.suse.com/show_bug.cgi?id=1234933 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2024122926-CVE-2024-56744-fc8b@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2334821 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-56744 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()syzbot reports deadlock issue of f2fs as below:======================================================WARNING: possible circular locking dependency detected6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 Not tainted------------------------------------------------------kswapd0/79 is trying to acquire lock:ffff888011824088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_down_write fs/f2fs/f2fs.h:2199 [inline]ffff888011824088 (&sbi->sb_lock){++++}-{3:3}, at: f2fs_record_stop_reason+0x52/0x1d0 fs/f2fs/super.c:4068but task is already holding lock:ffff88804bd92610 (sb_internal#2){.+.+}-{0:0}, at: f2fs_evict_inode+0x662/0x15c0 fs/f2fs/inode.c:842which lock already depends on the new lock.the existing dependency chain (in reverse order) is:-> #2 (sb_internal#2){.+.+}-{0:0}:       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825       percpu_down_read include/linux/percpu-rwsem.h:51 [inline]       __sb_start_write include/linux/fs.h:1716 [inline]       sb_start_intwrite+0x4d/0x1c0 include/linux/fs.h:1899       f2fs_evict_inode+0x662/0x15c0 fs/f2fs/inode.c:842       evict+0x4e8/0x9b0 fs/inode.c:725       f2fs_evict_inode+0x1a4/0x15c0 fs/f2fs/inode.c:807       evict+0x4e8/0x9b0 fs/inode.c:725       dispose_list fs/inode.c:774 [inline]       prune_icache_sb+0x239/0x2f0 fs/inode.c:963       super_cache_scan+0x38c/0x4b0 fs/super.c:223       do_shrink_slab+0x701/0x1160 mm/shrinker.c:435       shrink_slab+0x1093/0x14d0 mm/shrinker.c:662       shrink_one+0x43b/0x850 mm/vmscan.c:4818       shrink_many mm/vmscan.c:4879 [inline]       lru_gen_shrink_node mm/vmscan.c:4957 [inline]       shrink_node+0x3799/0x3de0 mm/vmscan.c:5937       kswapd_shrink_node mm/vmscan.c:6765 [inline]       balance_pgdat mm/vmscan.c:6957 [inline]       kswapd+0x1ca3/0x3700 mm/vmscan.c:7226       kthread+0x2f0/0x390 kernel/kthread.c:389       ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244-> #1 (fs_reclaim){+.+.}-{0:0}:       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5825       __fs_reclaim_acquire mm/page_alloc.c:3834 [inline]       fs_reclaim_acquire+0x88/0x130 mm/page_alloc.c:3848       might_alloc include/linux/sched/mm.h:318 [inline]       prepare_alloc_pages+0x147/0x5b0 mm/page_alloc.c:4493       __alloc_pages_noprof+0x16f/0x710 mm/page_alloc.c:4722       alloc_pages_mpol_noprof+0x3e8/0x680 mm/mempolicy.c:2265       alloc_pages_noprof mm/mempolicy.c:2345 [inline]       folio_alloc_noprof+0x128/0x180 mm/mempolicy.c:2352       filemap_alloc_folio_noprof+0xdf/0x500 mm/filemap.c:1010       do_read_cache_folio+0x2eb/0x850 mm/filemap.c:3787       read_mapping_folio include/linux/pagemap.h:1011 [inline]       f2fs_commit_super+0x3c0/0x7d0 fs/f2fs/super.c:4032       f2fs_record_stop_reason+0x13b/0x1d0 fs/f2fs/super.c:4079       f2fs_handle_critical_error+0x2ac/0x5c0 fs/f2fs/super.c:4174       f2fs_write_inode+0x35f/0x4d0 fs/f2fs/inode.c:785       write_inode fs/fs-writeback.c:1503 [inline]       __writeback_single_inode+0x711/0x10d0 fs/fs-writeback.c:1723       writeback_single_inode+0x1f3/0x660 fs/fs-writeback.c:1779       sync_inode_metadata+0xc4/0x120 fs/fs-writeback.c:2849       f2fs_release_file+0xa8/0x100 fs/f2fs/file.c:1941       __fput+0x23f/0x880 fs/file_table.c:431       task_work_run+0x24f/0x310 kernel/task_work.c:228       resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]       exit_to_user_mode_loop kernel/entry/common.c:114 [inline]       exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]       __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]       syscall_exit_to_user_mode+0x168/0x370 kernel/entry/common.c:218       do_syscall_64+0x100/0x230 arch/x86/entry/common.c:89       entry_SYSCALL_64_after_hwframe+0x77/0x7f---truncated---
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-24.03-LTS:受影响
2.openEuler-24.03-LTS-SP1:受影响
3.openEuler-20.03-LTS-SP4(4.19.90):不受影响
4.openEuler-22.03-LTS-SP1:不受影响
5.openEuler-22.03-LTS-SP3:不受影响
6.openEuler-22.03-LTS-SP4:不受影响
7.master:不受影响
8.openEuler-24.03-LTS-Next:不受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP4(4.19.90):否
2.openEuler-22.03-LTS-SP1:否
3.openEuler-22.03-LTS-SP3:否
4.master:否
5.openEuler-24.03-LTS:否
6.openEuler-24.03-LTS-Next:否
7.openEuler-22.03-LTS-SP4:否
8.openEuler-24.03-LTS-SP1:否

原因说明：
  1.openEuler-24.03-LTS:正常修复
2.openEuler-24.03-LTS-SP1:正常修复
3.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在
4.openEuler-22.03-LTS-SP1:不受影响-漏洞代码不存在
5.openEuler-22.03-LTS-SP3:不受影响-漏洞代码不存在
6.openEuler-22.03-LTS-SP4:不受影响-漏洞代码不存在
7.master:不受影响-漏洞代码不存在
8.openEuler-24.03-LTS-Next:不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1036

src-openEuler / kernel
Closed

Content Risk Flag

Comments (9)

src-openEuler / kernelClosed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2024-56744

Comments (9)

Search

src-openEuler / kernel
Closed