Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 5.10, < 5.10.0-rc6-btrfs-next-134
A warning was introduced in the Btrfs file system of the Linux kernel when a transaction is aborted with quota groups enabled. This warning occurs during the final phase of the transaction, indicating that the 'dirty_extent_root' is not empty, which could lead to potential issues. The warning is triggered because the 'btrfs_qgroup_destroy_extent_records' function, called during the transaction abort process, frees the entries from the 'dirty_extent_root' rbtree but does not clear the rbtree itself. As a result, the rbtree remains pointed to the now-freed nodes, causing the warning. The issue has been fixed by setting the rbtree's root to NULL, effectively clearing it and preventing the warning from occurring.
The vulnerability could lead to a persistent warning being generated, indicating that the 'dirty_extent_root' is not properly managed during transaction aborts, which could obscure other potential issues or bugs.
To reproduce this vulnerability, initiate a transaction in Btrfs with quota groups enabled. Then, force an abort of the transaction. After the abort, a warning will be triggered when the transaction is finalized, indicating that the 'dirty_extent_root' is not empty. This warning can be observed in the system logs.
The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the kernel where this issue has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.