btrfs: fix double accounting race when btrfs_run_delalloc_range() failed

{
  "id": "40a718ff43ece14e2317bad0bb7ebac903acee69c93ad8dcf3e49f8d933d12a9",
  "url": "https://osv.dev/vulnerability/CVE-2024-58089",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "btrfs: fix double accounting race when btrfs_run_delalloc_range() failed",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfs_run_delalloc_range() failed [BUG] When running btrfs with block size (4K) smaller than page size (64K, aarch64), there is a very high chance to crash the kernel at generic/750, with the following messages: (before the call traces, there are 3 extra debug messages added) BTRFS warning (device dm-3): read-write for sector size 4096 with page size 65536 is experimental BTRFS info (device dm-3): checking UUID tree hrtimer: interrupt took 5451385 ns BTRFS error (device dm-3): cow_file_range failed, root=4957 inode=257 start=1605632 len=69632: -28 BTRFS error (device dm-3): run_delalloc_nocow failed, root=4957 inode=257 start=1605632 len=69632: -28 BTRFS error (device dm-3): failed to run delalloc range, root=4957 ino=257 folio=1572864 submit_bitmap=8-15 start=1605632 len=69632: -28 ------------[ cut here ]------------ WARNING: CPU: 2 PID: 3020984 at ordered-data.c:360 can_finish_ordered_extent+0x370/0x3b8 [btrfs] CPU: 2 UID: 0 PID: 3020984 Comm: kworker/u24:1 Tainted: G OE 6.13.0-rc1-custom+ #89 Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU KVM Virtual Machine, BIOS unknown 2/2/2022 Workqueue: events_unbound btrfs_async_reclaim_data_space [btrfs] pc : can_finish_ordered_extent+0x370/0x3b8 [btrfs] lr : can_finish_ordered_extent+0x1ec/0x3b8 [btrfs] Call trace: can_finish_ordered_extent+0x370/0x3b8 [btrfs] (P) can_finish_ordered_extent+0x1ec/0x3b8 [btrfs",
    "evidence": "osv:CVE-2024-58089",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.12.17",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.13.5",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-58089",
      "aliases": [
        "CVE-2024-58089"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "d1051d6ebf8ef3517a5a3cf82bba8436d190f1c2"
                },
                {
                  "fixed": "21333148b5c9e52f41fafcedec3810b56a5e0e40"
                },
                {
                  "fixed": "0283ee1912c8e243c931f4ee5b3672e954fe0384"
                },
                {
                  "fixed": "72dad8e377afa50435940adfb697e070d3556670"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "4.19.73"
                },
                {
                  "fixed": "4.20"
                }
              ]
            },
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "eb124aaa2e85e9dceac37be5b7166a04b9b26735"
                }
              ]
            }
          ],
          "versions": [
            "v4.19.325",
            "v4.19.324",
            "v4.19.323",
            "v4.19.322",
            "v4.19.321",
            "v4.19.320",
            "v4.19.319",
            "v4.19.318",
            "v4.19.317",
            "v4.19.316",
            "v4.19.315",
            "v4.19.314",
            "v4.19.313",
            "v4.19.312",
            "v4.19.311",
            "v4.19.310",
            "v4.19.309",
            "v4.19.308",
            "v4.19.307",
            "v4.19.306",
            "v4.19.305",
            "v4.19.304",
            "v4.19.303",
            "v4.19.302",
            "v4.19.301",
            "v4.19.300",
            "v4.19.299",
            "v4.19.298",
            "v4.19.297",
            "v4.19.296",
            "v4.19.295",
            "v4.19.294",
            "v4.19.293",
            "v4.19.292",
            "v4.19.291",
            "v4.19.290",
            "v4.19.289",
            "v4.19.288",
            "v4.19.287",
            "v4.19.286",
            "v4.19.285",
            "v4.19.284",
            "v4.19.283",
            "v4.19.282",
            "v4.19.281",
            "v4.19.280",
            "v4.19.279",
            "v4.19.278",
            "v4.19.277",
            "v4.19.276",
            "v4.19.275",
            "v4.19.274",
            "v4.19.273",
            "v4.19.272",
            "v4.19.271",
            "v4.19.270",
            "v4.19.269",
            "v4.19.268",
            "v4.19.267",
            "v4.19.266",
            "v4.19.265",
            "v4.19.264",
            "v4.19.263",
            "v4.19.262",
            "v4.19.261",
            "v4.19.260",
            "v4.19.259",
            "v4.19.258",
            "v4.19.257",
            "v4.19.256",
            "v4.19.255",
            "v4.19.254",
            "v4.19.253",
            "v4.19.252",
            "v4.19.251",
            "v4.19.250",
            "v4.19.249",
            "v4.19.248",
            "v4.19.247",
            "v4.19.246",
            "v4.19.245",
            "v4.19.244",
            "v4.19.243",
            "v4.19.242",
            "v4.19.241",
            "v4.19.240",
            "v4.19.239",
            "v4.19.238",
            "v4.19.237",
            "v4.19.236",
            "v4.19.235",
            "v4.19.234",
            "v4.19.233",
            "v4.19.232",
            "v4.19.231",
            "v4.19.230",
            "v4.19.229",
            "v4.19.228",
            "v4.19.227",
            "v4.19.226",
            "v4.19.225",
            "v4.19.224",
            "v4.19.223",
            "v4.19.222",
            "v4.19.221",
            "v4.19.220",
            "v4.19.219",
            "v4.19.218",
            "v4.19.217",
            "v4.19.216",
            "v4.19.215",
            "v4.19.214",
            "v4.19.213",
            "v4.19.212",
            "v4.19.211",
            "v4.19.210",
            "v4.19.209",
            "v4.19.208",
            "v4.19.207",
            "v4.19.206",
            "v4.19.205",
            "v4.19.204",
            "v4.19.203",
            "v4.19.202",
            "v4.19.201",
            "v4.19.200",
            "v4.19.199",
            "v4.19.198",
            "v4.19.197",
            "v4.19.196",
            "v4.19.195",
            "v4.19.194",
            "v4.19.193",
            "v4.19.192",
            "v4.19.191",
            "v4.19.190",
            "v4.19.189",
            "v4.19.188",
            "v4.19.187",
            "v4.19.186",
            "v4.19.185",
            "v4.19.184",
            "v4.19.183",
            "v4.19.182",
            "v4.19.181",
            "v4.19.180",
            "v4.19.179",
            "v4.19.178",
            "v4.19.177",
            "v4.19.176",
            "v4.19.175",
            "v4.19.174",
            "v4.19.173",
            "v4.19.172",
            "v4.19.171",
            "v4.19.170",
            "v4.19.169",
            "v4.19.168",
            "v4.19.167",
            "v4.19.166",
            "v4.19.165",
            "v4.19.164",
            "v4.19.163",
            "v4.19.162",
            "v4.19.161",
            "v4.19.160",
            "v4.19.159",
            "v4.19.158",
            "v4.19.157",
            "v4.19.156",
            "v4.19.155",
            "v4.19.154",
            "v4.19.153",
            "v4.19.152",
            "v4.19.151",
            "v4.19.150",
            "v4.19.149",
            "v4.19.148",
            "v4.19.147",
            "v4.19.146",
            "v4.19.145",
            "v4.19.144",
            "v4.19.143",
            "v4.19.142",
            "v4.19.141",
            "v4.19.140",
            "v4.19.139",
            "v4.19.138",
            "v4.19.137",
            "v4.19.136",
            "v4.19.135",
            "v4.19.134",
            "v4.19.133",
            "v4.19.132",
            "v4.19.131",
            "v4.19.130",
            "v4.19.129",
            "v4.19.128",
            "v4.19.127",
            "v4.19.126",
            "v4.19.125",
            "v4.19.124",
            "v4.19.123",
            "v4.19.122",
            "v4.19.121",
            "v4.19.120",
            "v4.19.119",
            "v4.19.118",
            "v4.19.117",
            "v4.19.116",
            "v4.19.115",
            "v4.19.114",
            "v4.19.113",
            "v4.19.112",
            "v4.19.111",
            "v4.19.110",
            "v4.19.109",
            "v4.19.108",
            "v4.19.107",
            "v4.19.106",
            "v4.19.105",
            "v4.19.104",
            "v4.19.103",
            "v4.19.102",
            "v4.19.101",
            "v4.19.100",
            "v4.19.99",
            "v4.19.98",
            "v4.19.97",
            "v4.19.96",
            "v4.19.95",
            "v4.19.94",
            "v4.19.93",
            "v4.19.92",
            "v4.19.91",
            "v4.19.90",
            "v4.19.89",
            "v4.19.88",
            "v4.19.87",
            "v4.19.86",
            "v4.19.85",
            "v4.19.84",
            "v4.19.83",
            "v4.19.82",
            "v4.19.81",
            "v4.19.80",
            "v4.19.79",
            "v4.19.78",
            "v4.19.77",
            "v4.19.76",
            "v4.19.75",
            "v4.19.74",
            "v4.19.73"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58089.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.0.0"
                },
                {
                  "fixed": "6.12.17"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.13.5"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-58089.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:35.109464427Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0283ee1912c8e243c931f4ee5b3672e954fe0384",
        "https://git.kernel.org/stable/c/21333148b5c9e52f41fafcedec3810b56a5e0e40",
        "https://git.kernel.org/stable/c/72dad8e377afa50435940adfb697e070d3556670",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58089.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-58089",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58089.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-58089",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 502174,
  "published_at": "2025-03-12T09:41:59.709+00:00"
}