Linux Kernel Btrfs Delayed Allocation Handling Vulnerability

Vulnerability

A vulnerability in the Linux kernel's Btrfs file system has been addressed, related to improper management of delayed allocation during direct I/O write operations. This issue can lead to warnings about unprocessed extents when certain generic tests are run. The vulnerability arises because the length of allocated extents can be altered in copy-on-write scenarios, causing the system to release fewer extents than intended. The problem was fixed by ensuring that the original length is used when releasing extents, preventing the mismatch.

Impact

Exploitation of this vulnerability could result in a warning being triggered about unprocessed extents, indicating a potential inconsistency in the file system's allocation management.

Reproduction

To reproduce the issue, run the generic/406 test on a Btrfs file system that is 1 GiB in size. This will trigger a short-write scenario, as the system fails to allocate a large extent and instead provides a smaller one, leading to the warning about outstanding extents.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.