CVE-2023-54002
Estado: AplazadaSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix assertion of exclop condition when starting balance
Balance as exclusive state is compatible with paused balance and device add, which makes some things more complicated. The assertion of valid states when starting from paused balance needs to take into account two more states, the combinations can be hit when there are several threads racing to start balance and device add. This won't typically happen when the commands are started from command line.
Scenario 1: With exclusive_operation state == BTRFS_EXCLOP_NONE.
Concurrently adding multiple devices to the same mount point and btrfs_exclop_finish executed finishes before assertion in btrfs_exclop_balance, exclusive_operation will changed to BTRFS_EXCLOP_NONE state which lead to assertion failed:
Leer descripción completaMostrar menos
Scenario 2: With exclusive_operation state == BTRFS_EXCLOP_BALANCE_PAUSED.
Concurrently adding multiple devices to the same mount point and btrfs_exclop_balance executed finish before the latter thread execute assertion in btrfs_exclop_balance, exclusive_operation will changed to BTRFS_EXCLOP_BALANCE_PAUSED state which lead to assertion failed:
An example of the failed assertion is below, which shows that the paused balance is also needed to be checked.
Detalles técnicos trazas, registros y código del informe original
fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE || fs_info->exclusive_operation == BTRFS_EXCLOP_DEV_ADD, in fs/btrfs/ioctl.c:456 Call Trace: <TASK> btrfs_exclop_balance+0x13c/0x310 ? memdup_user+0xab/0xc0 ? PTR_ERR+0x17/0x20 btrfs_ioctl_add_dev+0x2ee/0x320 btrfs_ioctl+0x9d5/0x10d0 ? btrfs_ioctl_encoded_write+0xb80/0xb80 __x64_sys_ioctl+0x197/0x210 do_syscall_64+0x3c/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE || fs_info->exclusive_operation == BTRFS_EXCLOP_DEV_ADD || fs_info->exclusive_operation == BTRFS_EXCLOP_NONE, fs/btrfs/ioctl.c:458 Call Trace: <TASK> btrfs_exclop_balance+0x240/0x410 ? memdup_user+0xab/0xc0 ? PTR_ERR+0x17/0x20 btrfs_ioctl_add_dev+0x2ee/0x320 btrfs_ioctl+0x9d5/0x10d0 ? btrfs_ioctl_encoded_write+0xb80/0xb80 __x64_sys_ioctl+0x197/0x210 do_syscall_64+0x3c/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd root@syzkaller:/home/xsk# ./repro Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 Failed to add device /dev/vda, errno 14 [ 416.611428][ T7970] BTRFS info (device loop0): fs_info exclusive_operation: 0 Failed to add device /dev/vda, errno 14 [ 416.613973][ T7971] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.615456][ T7972] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.617528][ T7973] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.618359][ T7974] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.622589][ T7975] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.624034][ T7976] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.626420][ T7977] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.627643][ T7978] BTRFS info (device loop0): fs_info exclusive_operation: 3 Failed to add device /dev/vda, errno 14 [ 416.629006][ T7979] BTRFS info (device loop0): fs_info exclusive_operation: 3 [ 416.630298][ T7980] BTRFS info (device loop0): fs_info exclusive_operation: 3 Fai ---truncated---
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54002",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "a174c0a2e857081195db6888323802f0fae793ef",
"lessThan": "17eaeee4c5f24946aad0298d51f32981c3161d13",
"versionType": "git"
},
{
"status": "affected",
"version": "a174c0a2e857081195db6888323802f0fae793ef",
"lessThan": "7877dc1136ada770622d22041be306539902951b",
"versionType": "git"
},
{
"status": "affected",
"version": "a174c0a2e857081195db6888323802f0fae793ef",
"lessThan": "6062e9e335a3bf409b5118bfe4cc10aff4b6adb1",
"versionType": "git"
},
{
"status": "affected",
"version": "a174c0a2e857081195db6888323802f0fae793ef",
"lessThan": "ac868bc9d136cde6e3eb5de77019a63d57a540ff",
"versionType": "git"
}
],
"programFiles": [
"fs/btrfs/ioctl.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.17"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.29",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.2.16",
"versionType": "semver",
"lessThanOrEqual": "6.2.*"
},
{
"status": "unaffected",
"version": "6.3.3",
"versionType": "semver",
"lessThanOrEqual": "6.3.*"
},
{
"status": "unaffected",
"version": "6.4",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/btrfs/ioctl.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-24T11:15:53.117",
"references": [
{
"url": "https://git.kernel.org/stable/c/17eaeee4c5f24946aad0298d51f32981c3161d13",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6062e9e335a3bf409b5118bfe4cc10aff4b6adb1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7877dc1136ada770622d22041be306539902951b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/ac868bc9d136cde6e3eb5de77019a63d57a540ff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix assertion of exclop condition when starting balance\n\nBalance as exclusive state is compatible with paused balance and device\nadd, which makes some things more complicated. The assertion of valid\nstates when starting from paused balance needs to take into account two\nmore states, the combinations can be hit when there are several threads\nracing to start balance and device add. This won't typically happen when\nthe commands are started from command line.\n\nScenario 1: With exclusive_operation state == BTRFS_EXCLOP_NONE.\n\nConcurrently adding multiple devices to the same mount point and\nbtrfs_exclop_finish executed finishes before assertion in\nbtrfs_exclop_balance, exclusive_operation will changed to\nBTRFS_EXCLOP_NONE state which lead to assertion failed:\n\n fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE ||\n fs_info->exclusive_operation == BTRFS_EXCLOP_DEV_ADD,\n in fs/btrfs/ioctl.c:456\n Call Trace:\n <TASK>\n btrfs_exclop_balance+0x13c/0x310\n ? memdup_user+0xab/0xc0\n ? PTR_ERR+0x17/0x20\n btrfs_ioctl_add_dev+0x2ee/0x320\n btrfs_ioctl+0x9d5/0x10d0\n ? btrfs_ioctl_encoded_write+0xb80/0xb80\n __x64_sys_ioctl+0x197/0x210\n do_syscall_64+0x3c/0xb0\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nScenario 2: With exclusive_operation state == BTRFS_EXCLOP_BALANCE_PAUSED.\n\nConcurrently adding multiple devices to the same mount point and\nbtrfs_exclop_balance executed finish before the latter thread execute\nassertion in btrfs_exclop_balance, exclusive_operation will changed to\nBTRFS_EXCLOP_BALANCE_PAUSED state which lead to assertion failed:\n\n fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE ||\n fs_info->exclusive_operation == BTRFS_EXCLOP_DEV_ADD ||\n fs_info->exclusive_operation == BTRFS_EXCLOP_NONE,\n fs/btrfs/ioctl.c:458\n Call Trace:\n <TASK>\n btrfs_exclop_balance+0x240/0x410\n ? memdup_user+0xab/0xc0\n ? PTR_ERR+0x17/0x20\n btrfs_ioctl_add_dev+0x2ee/0x320\n btrfs_ioctl+0x9d5/0x10d0\n ? btrfs_ioctl_encoded_write+0xb80/0xb80\n __x64_sys_ioctl+0x197/0x210\n do_syscall_64+0x3c/0xb0\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nAn example of the failed assertion is below, which shows that the\npaused balance is also needed to be checked.\n\n root@syzkaller:/home/xsk# ./repro\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n Failed to add device /dev/vda, errno 14\n [ 416.611428][ T7970] BTRFS info (device loop0): fs_info exclusive_operation: 0\n Failed to add device /dev/vda, errno 14\n [ 416.613973][ T7971] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.615456][ T7972] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.617528][ T7973] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.618359][ T7974] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.622589][ T7975] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.624034][ T7976] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.626420][ T7977] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.627643][ T7978] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Failed to add device /dev/vda, errno 14\n [ 416.629006][ T7979] BTRFS info (device loop0): fs_info exclusive_operation: 3\n [ 416.630298][ T7980] BTRFS info (device loop0): fs_info exclusive_operation: 3\n Fai\n---truncated---"
}
],
"lastModified": "2026-06-17T06:46:30.987",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}