CVE-2024-57975: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability has been identified in the Linux kernel's BTRFS filesystem implementation, tracked as CVE-2024-57975. The issue relates to improper folio cleanup when run_delalloc_nocow() fails. This vulnerability was discovered through testing with CONFIG_DEBUG_VM set, where test case generic/476 demonstrated a potential kernel crash due to a VM_BUG_ON_FOLIO assertion (Kernel Git).

The vulnerability manifests when handling dirty page ranges in the BTRFS filesystem, specifically during the NOCOW (No Copy On Write) operation. The bug occurs in scenarios involving 4K block size and 4K page size configurations. When run_delalloc_nocow() fails, the error handling path doesn't properly clean up folio (page) states, leading to an attempt to mark writeback on unlocked pages. This triggers a VM_BUG_ON_FOLIO assertion, causing a kernel crash (NVD).

When triggered, this vulnerability can cause a kernel crash on systems using the BTRFS filesystem with specific configurations. The issue particularly affects systems with CONFIG_DEBUG_VM enabled and can lead to system instability during file operations that involve NOCOW writes (Kernel Git).

The vulnerability requires specific conditions to be triggered, including the use of BTRFS filesystem and particular file operations involving NOCOW writes. It appears to be primarily a stability issue rather than a security vulnerability, as it requires legitimate filesystem operations to manifest (NVD).

The issue has been resolved in the Linux kernel through a patch that implements proper folio cleanup. The fix includes introducing a cleanup_dirty_folios() helper function to handle dirty folio cleanup, adding proper handling for clearing folio dirty flags, and implementing correct tracking of failed COW range ends (Kernel Git).