CVE-2022-48901: 
Linux Kernel vulnerability analysis and mitigation

CVE-2022-48901 affects the Linux kernel's BTRFS filesystem implementation. The vulnerability was discovered when a bug occurred during a recovering relocation operation on mount for a filesystem in production. The issue specifically involves a race condition between snapshot deletion and relocation operations, which could occur when a system crashes during these concurrent operations (Kernel Git).

The vulnerability occurs when a pending balance operation is waiting to acquire the cleaner_mutex while a snapshot deletion is running, and the system crashes. Upon system recovery, this can lead to a state where there's a half-deleted snapshot, potentially allowing relocation to start before the snapshot deletion completes. This breaks the normal protection mechanism where snapshot deletion and relocation are mutually exclusive operations protected by the fs_info->cleaner_mutex (Kernel Git).

When triggered, this vulnerability can result in lookup errors for extent items, potentially causing filesystem inconsistencies. The issue manifests as an error while looking up an extent item, which could affect filesystem operations and potentially lead to data integrity issues (Kernel Git).

The vulnerability requires specific timing conditions involving snapshot deletion and balance operations, followed by a system crash. It was reproduced in testing by injecting errors into snapshot delete operations while running balance operations simultaneously (Kernel Git).

The issue has been fixed by implementing a new mechanism that sets a bit on the fs_info when there are any DEAD_ROOT entries with a pending drop_progress key. This prevents balance operations from starting until all pending snapshot deletions are completed. The fix ensures that partially deleted snapshots are properly handled during system recovery (Kernel Git).