Btrfs Quota Feature Vulnerability in Linux Kernel: Assertion Failure Risk
Summary
DEBIAN-CVE-2024-57806: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction atomicity bug when enabling simple quotas Set squota incompat bit before committing the transaction that enables the feature. Affects linux versions < 6.12.8-1. Fixed in 6.12.8-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and software interactions. It provides essential services for all other parts of the system, including process management, memory management, and device control. The Btrfs (B-tree file system) is a modern file system for Linux that supports advanced features like snapshots, dynamic inode allocation, and quotas. However, a vulnerability has been identified in the Btrfs quota feature, which can lead to assertion failures under specific conditions.
Vulnerability Detail
The vulnerability arises from a bug in the Btrfs file system related to the transaction atomicity when enabling simple quotas. Specifically, the incompatibility bit for the simple quota feature is not set before committing the transaction that enables it. This can lead to an assertion failure when the filesystem is mounted after a power failure or an unmounting without further transactions. The assertion failure occurs in the function btrfs_read_qgroup_config, which checks for the presence of the incompat bit, leading to potential system crashes and data integrity issues.
How To Fix
Minimum fixed version
6.12.8-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid enabling simple quotas on Btrfs filesystems until the package is updated. If you have already enabled quotas, ensure to commit any transactions before unmounting the filesystem.
Conclusion
The identified vulnerability in the Btrfs quota feature of the Linux kernel poses significant risks, including assertion failures and potential system crashes. It is crucial to update to the patched version to mitigate these risks. Users are encouraged to monitor their systems for vulnerabilities using tools like Vulert.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to assertion failures and potential system crashes when mounting Btrfs filesystems with simple quotas enabled.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor vulnerabilities without requiring installation.
If an immediate update is not possible, refrain from enabling simple quotas on Btrfs filesystems as a temporary measure.
Yes, if the filesystem is mounted under the conditions that trigger the vulnerability, there is a risk of data integrity issues.
You can find more information on the official Debian security advisories or by visiting vulnerability databases like CVE.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
