CVE-2024-58089

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

[BUG]

When running btrfs with block size (4K) smaller than page size (64K,

aarch64), there is a very high chance to crash the kernel at

generic/750, with the following messages:

(before the call traces, there are 3 extra debug messages added)

BTRFS warning (device dm-3): read-write for sector size 4096 with page size 65536 is experimental

BTRFS info (device dm-3): checking UUID tree

hrtimer: interrupt took 5451385 ns

BTRFS error (device dm-3): cow_file_range failed, root=4957 inode=257 start=1605632 len=69632: -28

BTRFS error (device dm-3): run_delalloc_nocow failed, root=4957 inode=257 start=1605632 len=69632: -28

BTRFS error (device dm-3): failed to run delalloc range, root=4957 ino=257 folio=1572864 submit_bitmap=8-15 start=1605632 len=69632: -28

------------[ cut here ]------------

WARNING: CPU: 2 PID: 3020984 at ordered-dat

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References