From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3A74127181F for ; Wed, 12 Feb 2025 13:53:16 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739368398; cv=none; b=B8HsaMMCVfzqAend9gSsoENLOTaZcsEE7fAkC+3+AecWNG+k6gFTU5Ndk3jqx6KklY2DIohP1TLP1pyld/SoiydvGN8GtFnmDP6F4Mq/2WiTk5QHd/HLZT34cm3CTW5d4vDNB7DZliEr3UHX9+HCSIaPb68O6RopGljYxFeLeWg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1739368398; c=relaxed/simple; bh=R5bLppCnnSvbO56VCgJbVPYJi290lhMpi+cHLkAyKZ8=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=Ka7YXr3NyV2Ho3HxZlbtQ4do66Wmm+YLmZ+3l/wM33tXv5VCvc+c2wr5uJHtBDaiRFo7aVxbI9/vmo4n/Tos/Bh5THwpXlKjK2lTHNUEVQ9g9NZ9jtj1v/vSdbUGToytrVrOkECYgny/BbJ527ME6WlgAg77Ypqu0Ey8DPP6zDw= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=Lpiya/1A; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="Lpiya/1A" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 4BCB1C4CEDF; Wed, 12 Feb 2025 13:53:16 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1739368396; bh=R5bLppCnnSvbO56VCgJbVPYJi290lhMpi+cHLkAyKZ8=; h=From:To:Cc:Subject:Date:Reply-to:From; b=Lpiya/1AK8t5I+bTpAkSJ3YZM0Rg+dYOYllSKXdnH9nnPUqCjc8qcEdf3VZegMzpA MSNOMAZbx9401SmnP0S8wDPRwZR2Y7Su8jlNNxNikNSitbxFP0p3Bw+pz8Wm8vHy1D JEbwZg8YBnMm/mGR7XaNjkklyPIBHWy+McBFzq9I= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag Date: Wed, 12 Feb 2025 14:52:02 +0100 Message-ID: <2025021202-CVE-2025-21699-029f@gregkh> X-Mailer: git-send-email 2.48.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2698; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=R5bLppCnnSvbO56VCgJbVPYJi290lhMpi+cHLkAyKZ8=; b=owGbwMvMwCRo6H6F97bub03G02pJDOlrljfJx/P9WKW39FljwOQvMjffpfDKe9gudE/zdNu14 /DmTT+dOmJZGASZGGTFFFm+bOM5ur/ikKKXoe1pmDmsTCBDGLg4BWAijkIM8922ZH854jP9+okv opK3p13rlGSIvcEwz3L7hliRHT5Tjqly6iYITDrg0vO7HwA= X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag Truncate an inode's address space when flipping the GFS2_DIF_JDATA flag: depending on that flag, the pages in the address space will either use buffer heads or iomap_folio_state structs, and we cannot mix the two. The Linux kernel CVE team has assigned CVE-2025-21699 to this issue. Affected and fixed versions =========================== Fixed in 5.4.290 with commit 2b0bd5051ad1c1e9ef4879f18e15a7712c974f3e Fixed in 5.10.234 with commit 8c41abc11aa8438c9ed2d973f97e66674c0355df Fixed in 5.15.178 with commit 4e3ded34f3f3c9d7ed2aac7be8cf51153646574a Fixed in 6.1.128 with commit 2a40a140e11fec699e128170ccaa98b6b82cb503 Fixed in 6.6.75 with commit 4dd57d1f0e9844311c635a7fb39abce4f2ac5a61 Fixed in 6.12.12 with commit 4516febe325342555bb09ca5b396fb816d655821 Fixed in 6.13.1 with commit 5bb1fd0855bb0abc7d97e44758d6ffed7882d2d0 Fixed in 6.14-rc1 with commit 7c9d9223802fbed4dee1ae301661bf346964c9d2 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-21699 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: fs/gfs2/file.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/2b0bd5051ad1c1e9ef4879f18e15a7712c974f3e https://git.kernel.org/stable/c/8c41abc11aa8438c9ed2d973f97e66674c0355df https://git.kernel.org/stable/c/4e3ded34f3f3c9d7ed2aac7be8cf51153646574a https://git.kernel.org/stable/c/2a40a140e11fec699e128170ccaa98b6b82cb503 https://git.kernel.org/stable/c/4dd57d1f0e9844311c635a7fb39abce4f2ac5a61 https://git.kernel.org/stable/c/4516febe325342555bb09ca5b396fb816d655821 https://git.kernel.org/stable/c/5bb1fd0855bb0abc7d97e44758d6ffed7882d2d0 https://git.kernel.org/stable/c/7c9d9223802fbed4dee1ae301661bf346964c9d2