btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.111, 6.18.53, 7.2.7
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails do_zone_finish() clears BLOCK_GROUP_FLAG_ZONE_IS_ACTIVE before finishing the zones. If call_zone_finish() then fails it returned early, leaving the now inactive block group on fs_info->zone_active_bgs, leaking its reference, the BTRFS_FS_NEED_ZONE_FINISH waiters are never woken, and as its alloc_offset equals the zone capacity btrfs_zone_finish_one_bg() keeps selecting it, spinning btrfs_zoned_activate_one_bg(). Fall through to the cleanup on failure too and return the error, but keep the block group read-only as its zones are left inconsistent.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From d70cbdda75da3f258118a558c087157e073229fb · fixed in 433d52b196a689b18dcfadc7cf6c784f0e5cc7c9; From d70cbdda75da3f258118a558c087157e073229fb · fixed in 36b9cdab44848f25879ca625275c92b007f84653; From d70cbdda75da3f258118a558c087157e073229fb · fixed in 40370f02a1ca3760f8925ffcbe76eb4d91ea758d; From d70cbdda75da3f258118a558c087157e073229fb · fixed in e1b168a53174b385e3548bfbd079513b22ac240c; From d70cbdda75da3f258118a558c087157e073229fb · fixed in a18a6b93a2843b9d103d3456bbd4b3f90282a379
- Linux Linux
5.19
- KernelLinux
From 5.19.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.7