Riskcovery

CVE-2023-52569

btrfs: remove BUG() after failure to insert delayed dir index item

State
Published
Severity
Not scored
Published
Mar 2, 2024
Updated
May 23, 2026
Reserved
Mar 2, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: remove BUG() after failure to insert delayed dir index item

Instead of calling BUG() when we fail to insert a delayed dir index item into the delayed node's tree, we can just release all the resources we have allocated/acquired before and return the error to the caller. This is fine because all existing call chains undo anything they have done before calling btrfs_insert_delayed_dir_index() or BUG_ON (when creating pending snapshots in the transaction commit path).

So remove the BUG() call and do proper error handling.

This relates to a syzbot report linked below, but does not fix it because it only prevents hitting a BUG(), it does not fix the issue where somehow we attempt to use twice the same index number for different index items.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9b378f6ad48cfa195ed868db9123c09ee7ec5ea2 to before d10fd53393cc5de4b9cf1a4b8f9984f0a037aa51Affected
  • 9b378f6ad48cfa195ed868db9123c09ee7ec5ea2 to before 2c58c3931ede7cd08cbecf1f1a4acaf0a04a41a9Affected
  • 79cf35e16dd5b8639909d4df957503b84de30406Affected
  • 5441532ffc9c8c9f7cab0f8722e6d60a0b5e1259Affected
  • 5.15.149 to before 5.16Affected
  • 6.4.12 to before 6.5Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.5.6 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.