CVE-2023-54281

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: release path before inode lookup during the ino lookup ioctl

During the ino lookup ioctl we can end up calling btrfs_iget() to get an

inode reference while we are holding on a root's btree. If btrfs_iget()

needs to lookup the inode from the root's btree, because it's not

currently loaded in memory, then it will need to lock another or the

same path in the same root btree. This may result in a deadlock and

trigger the following lockdep splat:

WARNING: possible circular locking dependency detected

6.5.0-rc7-syzkaller-00004-gf7757129e3de #0 Not tainted

------------------------------------------------------

syz-executor277/5012 is trying to acquire lock:

ffff88802df41710 (btrfs-tree-01){++++}-{3:3}, at: __btrfs_tree_read_lock+0x2f/0x220 fs/btrfs/locking.c:136

but task is already holding lock:

ffff88802df418e8 (btrfs-tree-00){++++}-{3:3}, at: __btrfs_tree_read_lock+0x2f/0x220 fs/btrfs/locking.c:136

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References