CVE-2024-48875

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: don't take dev_replace rwsem on task already holding it

Running fstests btrfs/011 with MKFS_OPTIONS="-O rst" to force the usage of

the RAID stripe-tree, we get the following splat from lockdep:

BTRFS info (device sdd): dev_replace from /dev/sdd (devid 1) to /dev/sdb started

============================================

WARNING: possible recursive locking detected

6.11.0-rc3-btrfs-for-next #599 Not tainted

--------------------------------------------

btrfs/2326 is trying to acquire lock:

ffff88810f215c98 (&fs_info->dev_replace.rwsem){++++}-{3:3}, at: btrfs_map_block+0x39f/0x2250

but task is already holding lock:

ffff88810f215c98 (&fs_info->dev_replace.rwsem){++++}-{3:3}, at: btrfs_map_block+0x39f/0x2250

other info that might help us debug this:

Possible unsafe locking scenario:

CPU0

----

lock(&fs_info->dev_replace.rwsem);

lock(&fs_info->dev_replace.rwsem);

*** DEADLOCK *

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References