CVE-2023-54158

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to block reservation and qgroup handling within the Btrfs filesystem. Specifically, the issue involves an incorrect release of qgroup reservations during subvolume creation, leading to a memory leak. This occurs because the btrfs block rsv release() function improperly modifies qgroup reservations when qgroup to release is not set, a scenario specific to subvolume creation. The problem arises from an optimization in btrfs insert delayed dir index() that frees extra reservations, unintentionally affecting qgroup reservations. The fix involves preventing modification of qgroup reservations unless qgroup to release is set, aligning the behavior with existing delalloc reservation handling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.