In the Linux kernel, the following vulnerability has been resolved:
btrfs: output extra debug info if we failed to find an inline backref
[BUG] Syzbot reported several warning triggered inside lookupinlineextent_backref().
[CAUSE] As usual, the reproducer doesn't reliably trigger locally here, but at least we know the WARN_ON() is triggered when an inline backref can not be found, and it can only be triggered when @insert is true. (I.e. inserting a new inline backref, which means the backref should already exist)
[ENHANCEMENT] After the WARN_ON(), dump all the parameters and the extent tree leaf to help debug.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53672.json",
"cna_assigner": "Linux"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53672.json"
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7c3cf2f6c42e6688b1c37215a0b1663f982f915",
"signature_type": "Function",
"digest": {
"function_hash": "300373632891130379408487047415477574624",
"length": 3157.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-0901ee76",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28062cd6eda04035d8f6ded2001292ac8b496149",
"signature_type": "Function",
"digest": {
"function_hash": "166309351251742281747143923710018990474",
"length": 3477.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-115a59fa",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6994f806c6d1ae8b59344d3700358547f3b3fe1d",
"signature_type": "Function",
"digest": {
"function_hash": "145705007320375700149916790984351417374",
"length": 3229.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-1f50b25f",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28062cd6eda04035d8f6ded2001292ac8b496149",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-23da02dc",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@400e08a16604b534fdd82c5a288fa150d04f5f79",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-32b20745",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7afbfde45d665953b4d5a42a721e15bf0315d89b",
"signature_type": "Function",
"digest": {
"function_hash": "300373632891130379408487047415477574624",
"length": 3157.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-37706d08",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6994f806c6d1ae8b59344d3700358547f3b3fe1d",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-4484d5eb",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e70ba449b04b40584bdabb383d10455397cbf177",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-476a2255",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e70ba449b04b40584bdabb383d10455397cbf177",
"signature_type": "Function",
"digest": {
"function_hash": "166309351251742281747143923710018990474",
"length": 3477.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-71670879",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7afbfde45d665953b4d5a42a721e15bf0315d89b",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-97212327",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@400e08a16604b534fdd82c5a288fa150d04f5f79",
"signature_type": "Function",
"digest": {
"function_hash": "300373632891130379408487047415477574624",
"length": 3157.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-a3059d5c",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f72f50547b7af4ddf985b07fc56600a4deba281",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-c2f599bd",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@376b41524b71e494514720bd6114325b0a2ed19c",
"signature_type": "Function",
"digest": {
"function_hash": "174003191422445751643630036938598260434",
"length": 3365.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-c420cd23",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7c3cf2f6c42e6688b1c37215a0b1663f982f915",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-decd2d29",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f72f50547b7af4ddf985b07fc56600a4deba281",
"signature_type": "Function",
"digest": {
"function_hash": "166309351251742281747143923710018990474",
"length": 3477.0
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c",
"function": "lookup_inline_extent_backref"
},
"id": "CVE-2023-53672-e174156d",
"signature_version": "v1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@376b41524b71e494514720bd6114325b0a2ed19c",
"signature_type": "Line",
"digest": {
"line_hashes": [
"280416581380405184786132437030791788821",
"53279391389295143046252190717891553470",
"276821040141100594801011970685144112661",
"148064266309506690120674164957704843710"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "fs/btrfs/extent-tree.c"
},
"id": "CVE-2023-53672-f0f96b0b",
"signature_version": "v1"
}
]