CVE-2023-54224

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc7-syzkaller-00024-g93f5de5f648d

Description The Linux kernel contained a flaw in the Btrfs file system related to delayed inode operations. Specifically, a potential deadlock situation could occur when handling delayed items after a failure during insertion. This issue arises from attempting to release a delayed node's mutex while holding a lock on a subvolume btree, leading to an ABBA-type deadlock. The problem was identified through syzbot testing and manifested as a lock dependency splat. The vulnerability could be triggered during operations like file synchronization.

Recommendations Update the Linux kernel to version 6.5.0-rc7-syzkaller-00024-g93f5de5f648d or a later version that includes the fix.