Linux Kernel Btrfs Quota Tree Relocation Mismatch Vulnerability

A vulnerability in the Linux kernel's Btrfs file system has been addressed, which involved a race condition between quota tree creation and relocation. This issue could lead to a duplicated quota tree being created, causing a crash when an assertion was triggered. The vulnerability has been resolved by modifying the code to handle relocation root mismatches more gracefully, without relying on assertions that could confuse developers.

Impact

The vulnerability could cause a denial of service by triggering a crash due to a failed assertion, which is not handled properly in the code.

Reproduction

The vulnerability can be reproduced by creating a race condition between the creation of a quota tree and its relocation, which can lead to a duplicated quota tree being read as a file system tree, causing the system to crash when the assertion is checked.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.