The Linux kernel ext4 filesystem ioctl EXT4_IOC_MOVE_EXT was vulnerable due to late validation of the donor file's superblock, which occurred after inode locks were acquired. If the donor file was on a different filesystem (e.g., overlayfs), this caused a circular lock dependency and deadlock involving inode locks and superblock writers during concurrent freeze operations. The vulnerability was addressed by moving the superblock validation earlier, rejecting donor files from different filesystems before any locks are taken, thereby eliminating the deadlock cycle.

This vulnerability could cause a deadlock in the kernel when attempting to move extents between files on different filesystems, potentially leading to system hangs or degraded performance during such operations. There is no indication of privilege escalation or data corruption from the provided information.

A fix has been implemented in the Linux kernel to perform superblock validation early in the EXT4_IOC_MOVE_EXT ioctl, rejecting donor files from different filesystems before acquiring locks. Users should update to a kernel version that includes this fix once available. Patch status is not yet confirmed from the provided data; check the vendor advisory for current remediation guidance.