CVE-2023-52569

btrfs: remove BUG() after failure to insert delayed dir index item

published March 2, 2024

CVSS
—
EPSS
0%
Percentile
14.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: remove BUG() after failure to insert delayed dir index item

Instead of calling BUG() when we fail to insert a delayed dir index item

into the delayed node's tree, we can just release all the resources we

have allocated/acquired before and return the error to the caller. This is

fine because all existing call chains undo anything they have done before

calling btrfs_insert_delayed_dir_index() or BUG_ON (when creating pending

snapshots in the transaction commit path).

So remove the BUG() call and do proper error handling.

This relates to a syzbot report linked below, but does not fix it because

it only prevents hitting a BUG(), it does not fix the issue where somehow

we attempt to use twice the same index number for different index items.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00241 · 14.3th percentile
Published
2024-03-02T21:59Z
EPSS history
Timeline
  • 02 MAR 21:59Z
    btrfs: remove BUG() after failure to insert delayed dir index item
    cvelistv5