CVE Database›CVE-2023-53672

CVE-2023-53672

kernel: btrfs: output extra debug info if we failed to find an inline backref

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 7, 2025

Updated · June 30, 2026

Description

A logic error was found in the Linux kernel's Btrfs filesystem in the inline extent backref lookup logic. A local user can trigger this issue by performing filesystem operations that attempt to insert an inline backref that should already exist but cannot be found, causing the driver to hit a WARN_ON assertion. This results in kernel warnings and potential system instability leading to denial of service.

Statement

The lookup_inline_extent_backref function searches for inline backrefs in the Btrfs extent tree. When called with the insert flag set to true (indicating a new backref should be inserted), the code expects to find an existing backref entry. When it cannot find one, it triggers a WARN_ON assertion indicating an inconsistency in the filesystem metadata. This situation suggests either filesystem corruption or a bug in Btrfs extent management logic. While the warning itself is primarily a diagnostic measure, the underlying condition represents a filesystem consistency issue that could lead to data loss or system instability. The issue can occur during normal filesystem operations on Btrfs volumes, particularly under stress or with corrupted metadata.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-253 · Incorrect Check of Function Return Value