Deadlock between quota disable and qgroup rescan worker in btrfs
Summary
GSD-2022-1000655: btrfs: fix deadlock between quota disable and qgroup rescan worker. Affects Kernel versions < 31198e58c09e21d4f65c49d2361f76b87aca4c3f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a file system for Linux that provides advanced features such as snapshots, compression, and RAID-like functionality. It is widely used in various Linux distributions. This vulnerability in btrfs involves a deadlock between the quota disable functionality and the qgroup rescan worker. Quota disable is responsible for disabling quota enforcement on a btrfs file system, while the qgroup rescan worker is responsible for updating the quota information for file system objects. The deadlock occurs when these two processes interact, leading to a system freeze or unresponsiveness.
Vulnerability Detail
The vulnerability arises due to a race condition between the quota disable and qgroup rescan worker processes. When quota disable is triggered while the qgroup rescan worker is running, it can lead to a deadlock situation where both processes are waiting for each other to complete. This deadlock can cause the system to become unresponsive, impacting its availability and potentially leading to a denial-of-service situation. The vulnerability has been fixed in Linux Kernel version v5.16.8 by commit 31198e58c09e21d4f65c49d2361f76b87aca4c3f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel.
Conclusion
The deadlock between quota disable and qgroup rescan worker in btrfs can lead to system unresponsiveness and denial-of-service situations. It is crucial to update the Linux Kernel to version v5.16.8 or later to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
btrfs is a file system for Linux that provides advanced features such as snapshots, compression, and RAID-like functionality.
The vulnerability can lead to a deadlock situation, causing the system to become unresponsive and potentially leading to a denial-of-service situation.
To fix this vulnerability, update the Linux Kernel to version v5.16.8 or later.
There is no specific workaround mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
For more information, refer to the vulnerability details in the Open Source Vulnerability format or consult the official documentation and release notes of the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
