CVE-2024-57806

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.8

Description The issue is related to a transaction atomicity bug when enabling simple quotas in the Linux kernel. Specifically, when enabling quotas, the BTRFS QGROUP STATUS FLAG SIMPLE MODE flag is set, but the BTRFS FEATURE INCOMPAT SIMPLE QUOTA incompat bit is only set after the transaction is committed. This can lead to an assertion failure if the filesystem is unmounted without starting and committing another transaction, or if there is a power failure. The issue can be reproduced using a specific reproducer script.

Recommendations To resolve the issue, update to a Linux kernel version 6.12.8 or later. As a temporary workaround, consider avoiding the use of simple quotas until a patch is available.