CVE-2024-48875

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.74

Description: A vulnerability has been resolved in the Linux kernel, specifically in the btrfs module. The issue is related to a possible recursive locking detected when running fstests btrfs/011 with MKFS OPTIONS="-O rst". This could lead to a deadlock scenario. The vulnerability is caused by the btrfs module trying to acquire a lock that is already held by the task. Technical details about exploitation include the btrfs map block() function and the dev replace.rwsem lock.

Recommendations: To resolve the issue, update the Linux kernel to version 6.6.74 or later. As a temporary workaround, consider disabling the btrfs dev replace by ioctl() function until a patch is available. Restrict access to the btrfs map block() function to minimize the risk of exploitation. Avoid using the dev replace.rwsem lock in the affected API endpoints until the issue is resolved.