All of lore.kernel.org
 help / color / mirror / Atom feed
From: fdmanana@kernel.org
To: linux-btrfs@vger.kernel.org
Subject: [PATCH 0/3] btrfs: fixes for the received subvol ioctl
Date: Fri, 27 Feb 2026 00:11:40 +0000	[thread overview]
Message-ID: <cover.1772150849.git.fdmanana@suse.com> (raw)

From: Filipe Manana <fdmanana@suse.com>

Fix a bug that can be exploited by malicious users to trigger a transaction
abort and turn the filesystem to RO mode by assigning the same received UUID
to a bunch of subvolumes, plus a missing transaction abort if we fail to
update a root item, and a cleanup.

Filipe Manana (3):
  btrfs: fix transaction abort on set received ioctl due to item overflow
  btrfs: abort transaction on failure to update root in the received subvol ioctl
  btrfs: remove unnecessary transaction abort in the received subvol ioctl

 fs/btrfs/ioctl.c     | 23 ++++++++++++++++++++---
 fs/btrfs/uuid-tree.c | 38 ++++++++++++++++++++++++++++++++++++++
 fs/btrfs/uuid-tree.h |  2 ++
 3 files changed, 60 insertions(+), 3 deletions(-)

-- 
2.47.2


             reply	other threads:[~2026-02-27  0:11 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-27  0:11 fdmanana [this message]
2026-02-27  0:11 ` [PATCH 1/3] btrfs: fix transaction abort on set received ioctl due to item overflow fdmanana
2026-02-27  0:11 ` [PATCH 2/3] btrfs: abort transaction on failure to update root in the received subvol ioctl fdmanana
2026-02-27  0:11 ` [PATCH 3/3] btrfs: remove unnecessary transaction abort " fdmanana
2026-02-27 23:27 ` [PATCH 0/3] btrfs: fixes for " Anand Jain
2026-02-28 17:49   ` Filipe Manana

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1772150849.git.fdmanana@suse.com \
    --to=fdmanana@kernel.org \
    --cc=linux-btrfs@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.