CVE-2024-56780

Summary

CVE-2024-56780 is a vulnerability affecting the Linux kernel that arises from a failure to consistently flush the quota_release_work queue during fs sync operations. Specifically, the issue occurs when the quota writeback path is called from functions such as freeze_super(), sync_filesystem(), and ext4_sync_fs(). In this scenario, if the quota_release_work queue is not emptied before an fs freeze, a race condition ensues. As a result, once the freeze completes, the kernel tries to flush the workqueue, but encounters a WARN_ON condition due to the filesystem being frozen. This ultimately triggers a failure in generic/390, leading to dmesg noise. To mitigate this issue, it is crucial to ensure that the workqueue is emptied during quota_writeback_dquots() to prevent any pending work items after the fs freeze.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.