From nobody Wed Jun 19 21:06:37 2024 X-Original-To: freebsd-announce@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W4GQ50wpVz5Nqjq for ; Wed, 19 Jun 2024 21:06:37 +0000 (UTC) (envelope-from security-advisories@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4W4GQ50SSkz4TmJ; Wed, 19 Jun 2024 21:06:37 +0000 (UTC) (envelope-from security-advisories@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1718831197; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=72woZjxYhBV90RW/DiWR/Xczr1INNonFlmlNOnqpDys=; b=rTR26mx7X/k80eWPiU3nHHPwWe0rQ2lJNBgBNvG566pl0Gldc/lAVe7eJUhHHBFsvVZXVd 4f4dLGyhyiexEVfrot4Y8Rjxy07hpEeOan1drcfLtUAfUbhGyUsyFNxyIdyvhlIunQ3oC7 8mbrO3n9Ezd4E8VJXsflYhWXITw7O+WC+qXRqt7YReSH19JaMdsSWpVUXEnvG7cwg0SiX3 e3F9X2Ke2coHqmg+VbYqix35XkI5JgCM0zKKF/tqvbxTGcKweSycQI47KuFR9n61FUqQ8c 8qLqMFP7YownvVDN6EiK2DF9wR2sgSfRmtC7NBGIBzkMpIvzvBGUdAX+DSewbg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1718831197; a=rsa-sha256; cv=none; b=N6Pmxvp0XcV1NuSQZKOkL3N+zpqACpZlnlG0kYCPK/wJz+Tlw84v3ROf+C7ulYRgx7tn9O a2xqitN3yIK+aPE3srmFsQpTmzxwLMjDekw23CIYXWyw9BGVLHui5OYt63wi8IsbLbmi+G 7zgHlz9VGSP/ARfzP13DVki5BGLPyQdfkqevOAPxh27zvb8p4jRfGuvJQ1jUT/lm10az2+ xs/3N3Bzjj1MEI2/5YPFj9eigRvGgnZJRgzgSdunsQBMcduud3UA2DlUNLdpu4tWBGvJ0s OnAT6xSt1Dw0eIXh5o5I14wjaSrm8Vyg0i/K7ed+zgCohOiVoLP1CcFw8gAsYg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1718831197; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc; bh=72woZjxYhBV90RW/DiWR/Xczr1INNonFlmlNOnqpDys=; b=ZXuJ65YfIz19ueb55+jjQFr1eiwZ3a3sHD+pyyudN+kxYY4uHYlaUWSNuBp5gYWmWZq4e4 TswE+m01HoIkDKtta/bpMpk0KXeKi5YPJcBn+TYn0NG4cWOTBz+txya8LF6+5vC4SVC/PV xPW1LXU3HmBerKb9dT60Bz6XqKl6nUvNRhPe1VieArT0nwIFESJEc8yVByhDa+qzbI3dyS /KP4RQOPmqVmpP7c9UbjiglN8Ojl1TliDTg2jDUWp5HivKlYlmp0Zn/q7Zx4PcK5JjP3sd eCX38hPeGQV19bf8j5hwwLqC6DpAxgfRth65TBTxk4dStx8HS27tr+x8Wxtexw== Received: by freefall.freebsd.org (Postfix, from userid 945) id 0655C2445; Wed, 19 Jun 2024 21:06:37 +0000 (UTC) From: FreeBSD Errata Notices To: FreeBSD Errata Notices Subject: FreeBSD Errata Notice FreeBSD-EN-24:10.zfs Reply-To: freebsd-stable@freebsd.org Precedence: bulk Message-Id: <20240619210637.0655C2445@freefall.freebsd.org> Date: Wed, 19 Jun 2024 21:06:37 +0000 (UTC) List-Id: Project Announcements [moderated] List-Archive: https://lists.freebsd.org/archives/freebsd-announce List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-announce@freebsd.org Sender: owner-freebsd-announce@FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-EN-24:10.zfs Errata Notice The FreeBSD Project Topic: Kernel memory leak in ZFS Category: core Module: openzfs Announced: 2024-06-19 Affects: FreeBSD 14.1 Corrected: 2024-06-17 14:35:24 UTC (stable/14, 14.1-STABLE) 2024-06-19 20:36:48 UTC (releng/14.1, 14.1-RELEASE-p1) For general information regarding FreeBSD Errata Notices and Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit . I. Background ZFS is an advanced and scalable file system originally developed by Sun Microsystems for its Solaris operating system. ZFS was integrated as part of the FreeBSD starting with FreeBSD 7.0, and it has since become a prominent and preferred choice for storage management. II. Problem Description When writing data to a file on ZFS, the kernel may need to handle soft page faults that can occur when accessing user data. When doing so, in some cases ZFS needs to undo an earlier kernel buffer allocation. A bug in the handling of these cases causes this buffer to be leaked. III. Impact The leaked kernel memory is effectively lost and cannot be reused for other purposes. Some workloads may trigger the leak frequently, eventually requiring a reboot of the system. IV. Workaround No workaround is available. V. Solution Upgrade your system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date. Perform one of the following: 1) To update your system via a binary patch: Systems running a RELEASE version of FreeBSD on the amd64 or arm64 platforms, or the i386 platform on FreeBSD 13, can be updated via the freebsd-update(8) utility: # freebsd-update fetch # freebsd-update install # reboot 2) To update your system via a source code patch: The following patches have been verified to apply to the applicable FreeBSD release branches. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. # fetch https://security.FreeBSD.org/patches/EN-24:10/zfs.patch # fetch https://security.FreeBSD.org/patches/EN-24:10/zfs.patch.asc # gpg --verify zfs.patch.asc b) Apply the patch. Execute the following commands as root: # cd /usr/src # patch < /path/to/patch c) Recompile your kernel as described in and reboot the system. VI. Correction details This issue is corrected as of the corresponding Git commit hash in the following stable and release branches: Branch/path Hash Revision - ------------------------------------------------------------------------- stable/14/ 1c27279ed22d stable/14-n267965 releng/14.1/ f566b7eb8d94 releng/14.1-n267680 - ------------------------------------------------------------------------- Run the following command to see which files were modified by a particular commit: # git show --stat Or visit the following URL, replacing NNNNNN with the hash: To determine the commit count in a working tree (for comparison against nNNNNNN in the table above), run: # git rev-list --count --first-parent HEAD VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmZzRTcACgkQbljekB8A Gu+zUQ/+IiSe/HQFSKrBwIxBxnlFQfTjNq02f14TPZghCTxNCWdGXXD6QR2d8ydZ bfryBwVsnnU3WlCPs6kyJfIlSp9vH2hqRJ+N5VyDvGkBUpWaGm0+ps5LGTQbGR8O ig/kIuRzNO0Mqi42MIse6UvozLAuahYA6sQ3nn6j/4grV7jiuxDCrfmfBOMLgN4D LZ87ApJM09lT2pe8x7hZBxk8wJKf6cWvpBjNh+zwPLc+oMvvIPkqiMjuy7ni7f/5 K/GDf4i3XgTf9pdPAwLNZoTNb7UebKzRGWlxmdOie6FUDHIuEwoJledmhbOmH91G PKtHx2skFVKKtFXgfMGraK5FBpwkoJbIo1uCUamEoo4cGMGR92ErP/MVa6MsIs3Z pLq1M/eN9aYQHCogb1uirQVZAutJhNJ9QsQo0rBJNgLE9l1UPnSIJ6CLpW83nY1f 8eedQKyfwMYL5jivH/aKEsd/vzqInAiFU55oO64OPvgKv3pj3TgIECoc9kfdfXc7 VR2yfNy8CKd/exb+CRqgeJGT8LaL2Wy66pUd9usIc/mNola8ce0uuPDc0703b5ob xfCorrd3gRhNB+Od3wrs4p7tzwqndfo5882w9EXEhuhubfft9voRTzpDvSe0y3ib YPY6EnHWSYAP56+f/shnworMxYtYrUipBYQVYxLBBtdV7DsYuKo= =YxSw -----END PGP SIGNATURE-----