Linux Kernel Use-After-Free Vulnerability in Btrfs COW Operation

A use-after-free vulnerability has been identified in the Linux kernel's Btrfs file system. The issue arises during the Copy-On-Write (COW) operation on tree blocks when tracing is enabled and preemption is allowed. Specifically, the vulnerability occurs in the 'btrfs_cow_block()' function, where the last reference to the extent buffer can be released before the corresponding tracepoint is executed. This premature release, managed by the Read-Copy Update (RCU) mechanism, can lead to a use-after-free condition, as the extent buffer may be freed before the tracepoint has completed its execution.

Impact

Exploitation of this vulnerability leads to a use-after-free condition, which can potentially be exploited to execute arbitrary code or cause a denial-of-service by crashing the system.