CVE-2023-53348

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix deadlock when aborting transaction during relocation with scrub

Before relocating a block group we pause scrub, then do the relocation and

then unpause scrub. The relocation process requires starting and committing

a transaction, and if we have a failure in the critical section of the

transaction commit path (transaction state >= TRANS_STATE_COMMIT_START),

we will deadlock if there is a paused scrub.

That results in stack traces like the following:

[42.479] BTRFS info (device sdc): relocating block group 53876686848 flags metadata|raid6

[42.936] BTRFS warning (device sdc): Skipping commit of aborted transaction.

[42.936] ------------[ cut here ]------------

[42.936] BTRFS: Transaction aborted (error -28)

[42.936] WARNING: CPU: 11 PID: 346822 at fs/btrfs/transaction.c:1977 btrfs_commit_transaction+0xcc8/0xeb0 [btrfs]

[42.936] Modules linked in: dm_flakey dm_mod loop btrfs (...)

[42.936] CPU:

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References