CVE-2023-52668: btrfs: zoned: fix lock ordering in btrfs_zone_activate()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: fix lock ordering in btrfszoneactivate()
The btrfs CI reported a lockdep warning as follows by running generic generic/129.
WARNING: possible circular locking dependency detected 6.7.0-rc5+ #1 Not tainted ------------------------------------------------------ kworker/u5:5/793427 is trying to acquire lock: ffff88813256d028 (&cache->lock){+.+.}-{2:2}, at: btrfszonefinishonebg+0x5e/0x130 but task is already holding lock: ffff88810a23a318 (&fsinfo->zoneactivebgslock){+.+.}-{2:2}, at: btrfszonefinishonebg+0x34/0x130 which lock already depends on the new lock.
the existing dependency chain (in reverse order) is: -> #1 (&fsinfo->zoneactivebgslock){+.+.}-{2:2}: ... -> #0 (&cache->lock){+.+.}-{2:2}: ...
This is because we take fsinfo->zoneactivebgslock after a blockgroup's lock in btrfszoneactivate() while doing the opposite in other places.
Fix the issue by expanding the fsinfo->zoneactivebgslock's critical section and taking it before a blockgroup's lock.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52668?
CVE-2023-52668 has not been assigned a specific severity rating, but it addresses a potential circular locking dependency in the Linux kernel.
How do I fix CVE-2023-52668?
To resolve CVE-2023-52668, users should update their Linux kernel to a version that includes the fix for the vulnerability.
Is CVE-2023-52668 exploitable?
CVE-2023-52668 primarily involves a locking issue which could lead to stability problems but is not categorized as a direct exploit.
Which versions of the Linux kernel are affected by CVE-2023-52668?
CVE-2023-52668 affects versions of the Linux kernel starting from 6.7.0-rc5.
What components of the Linux kernel does CVE-2023-52668 involve?
CVE-2023-52668 involves the btrfs file system and its lock ordering mechanism.