Btrfs Filesystem Vulnerability in Linux Kernel Affecting Multiple RAID Profiles

CVE-2023-53243

What is CVE-2023-53243?

A vulnerability in the Btrfs filesystem implementation of the Linux kernel can lead to improper handling of RAID1C23 and DUP allocation profiles. When allocating new blocks, the function btrfs_reduce_alloc_profile may malfunction due to the presence of multiple unhandled allocation profile flags. This issue can trigger a transaction abort, necessitating the filesystem to be mounted with the -o skip_balance option to regain read-write access. Consequently, filesystems with conflicting RAID profiles might experience instability and errors during operation, potentially leading to data loss or system crashes.

References