CVE-2023-54002

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the btrfs subsystem related to the assertion of exclusive operation conditions during balance operations. Specifically, the issue arises when multiple devices are concurrently added to the same mount point, potentially leading to assertion failures in btrfs exclop balance and btrfs ioctl add dev. This can occur when threads race to start balance and device add operations. The assertion failures are observed when the exclusive operation state is either BTRFS EXCLOP NONE or BTRFS EXCLOP BALANCE PAUSED. The issue manifests as failures when adding devices, as demonstrated in the provided example output. The fs info->exclusive operation variable is involved in the assertion checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.