CVE-2023-54281

A deadlock flaw was found in the Linux kernel's Btrfs filesystem. During the inode lookup ioctl (BTRFS_IOC_INO_LOOKUP_USER), the code attempts to acquire an inode reference while holding a btree path lock. If the inode is not in memory, looking it up requires locking the same btree again, creating a circular locking dependency that can deadlock the system.

This can be triggered by unprivileged users via the BTRFS_IOC_INO_LOOKUP_USER ioctl on Btrfs filesystems. The deadlock causes affected processes to hang permanently. Syzkaller fuzzing discovered this issue through lockdep analysis.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.