Deadlock between quota disable and qgroup rescan worker in btrfs
Summary
GSD-2022-1000219: btrfs: fix deadlock between quota disable and qgroup rescan worker. Affects Kernel versions < 32747e01436aac8ef93fe85b5b523b4f3b52f040. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a file system for Linux that provides advanced features such as snapshots, pooling, and data integrity. It is widely used in various Linux distributions. The quota feature in btrfs allows users to set limits on disk space usage for specific users or groups. The qgroup rescan worker is responsible for updating the quota information. However, a deadlock can occur when disabling the quota feature while the qgroup rescan worker is running.
Vulnerability Detail
The vulnerability arises from a deadlock situation between the quota disable operation and the qgroup rescan worker in the btrfs package. When the quota feature is disabled while the qgroup rescan worker is active, a deadlock can occur, leading to a system freeze or unresponsiveness. This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition on a vulnerable system. The deadlock issue has been fixed in the Linux Kernel version v5.10.99 by commit 32747e01436aac8ef93fe85b5b523b4f3b52f040.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
In conclusion, the btrfs package is vulnerable to a deadlock issue between the quota disable operation and the qgroup rescan worker. This vulnerability can be exploited to cause a denial-of-service condition. It is recommended to update the Linux Kernel to version v5.10.99 or later to fix this issue. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
btrfs is a file system for Linux that provides advanced features such as snapshots, pooling, and data integrity.
The quota feature in btrfs allows users to set limits on disk space usage for specific users or groups.
The qgroup rescan worker is responsible for updating the quota information in btrfs.
A deadlock is a situation where two or more processes are unable to proceed because each is waiting for the other to release a resource.
This vulnerability can lead to a system freeze or unresponsiveness, causing a denial-of-service (DoS) condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
