CVE-2023-53672: btrfs: output extra debug info if we failed to find an inline backref
In the Linux kernel, the following vulnerability has been resolved:
btrfs: output extra debug info if we failed to find an inline backref
[BUG] Syzbot reported several warning triggered inside lookupinlineextentbackref().
[CAUSE] As usual, the reproducer doesn't reliably trigger locally here, but at least we know the WARNON() is triggered when an inline backref can not be found, and it can only be triggered when @insert is true. (I.e. inserting a new inline backref, which means the backref should already exist)
[ENHANCEMENT] After the WARNON(), dump all the parameters and the extent tree leaf to help debug.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53672?
CVE-2023-53672 is rated as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53672?
To mitigate CVE-2023-53672, it is recommended to update the Linux kernel to a version that includes the security patch.
What software is affected by CVE-2023-53672?
CVE-2023-53672 affects the Linux Kernel, particularly versions prior to the security fix.
What type of vulnerability is CVE-2023-53672?
CVE-2023-53672 is a vulnerability related to Btrfs filesystem handling in the Linux kernel.
Are there any known exploits for CVE-2023-53672?
As of now, there are no public exploits reported for CVE-2023-53672, but it is advisable to apply updates as a precaution.