CVE-2021-46958

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between a task aborting a transaction during a commit, a task doing an fsync, and the transaction kthread, leading to a use-after-free of the log root tree. This results in a stack trace with errors such as "BTRFS info (device dm-0): forced readonly" and "BTRFS: error (device dm-0) in cleanup transaction:1958: errno=-5 IO failure". The issue occurs when two tasks have a transaction handle attached to the same transaction, and one task is doing an fsync while the other task calls btrfs commit transaction(), causing an error before the transaction is committed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.