CVE-2023-54002

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix assertion of exclop condition when starting balance

Balance as exclusive state is compatible with paused balance and device

add, which makes some things more complicated. The assertion of valid

states when starting from paused balance needs to take into account two

more states, the combinations can be hit when there are several threads

racing to start balance and device add. This won't typically happen when

the commands are started from command line.

Scenario 1: With exclusive_operation state == BTRFS_EXCLOP_NONE.

Concurrently adding multiple devices to the same mount point and

btrfs_exclop_finish executed finishes before assertion in

btrfs_exclop_balance, exclusive_operation will changed to

BTRFS_EXCLOP_NONE state which lead to assertion failed:

fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE ||

fs_info->exclusive_operation == BTRFS_EXCLOP_DEV_ADD,

in fs/btrfs/ioctl.c:456

Call Trace:

<T

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References