GSD-2022-1005187 btrfs: ensure pages are unlocked on cow_file_range() failure

btrfs: ensure pages are unlocked on cowfilerange failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005153 btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()

btrfs: raid56: don't trust any cached sector in raid56parityrecover This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.3 by commit...

GSD-2022-1005151 btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()

btrfs: unset reloc control if transaction commit fails in preparetorelocate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

GSD-2022-1005037 btrfs: fix space cache corruption and potential double allocations

btrfs: fix space cache corruption and potential double allocations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1005034 btrfs: fix possible memory leak in btrfs_get_dev_args_from_path()

btrfs: fix possible memory leak in btrfsgetdevargsfrompath This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...

GSD-2022-1004991 btrfs: fix lockdep splat with reloc root extent buffers

btrfs: fix lockdep splat with reloc root extent buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by commit...

PT-2022-33411 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.3 Description: The issue is related to the btrfs raid56 functionality, specifically in the raid56 parity recover function, where cached sectors are not trusted. The actual impact and attack plausibility ha...

PT-2022-33699 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.15.64 Description: The issue concerns a space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33610 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a problem with btrfs log replay when there is an unsupported read-only compatibility flag. The actual impact and potential for attack have not been proven yet...

PT-2022-33409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to the btrfs filesystem in the Linux Kernel, where the reloc control is not unset if a transaction commit fails in the prepare to relocate function. The actual impact an...

PT-2022-33698 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: A potential memory leak issue was discovered in the btrfs get dev args from path function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.5 Description: The issue concerns space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-33666 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue is related to a lockdep splat with reloc root extent buffers in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2022-33445 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the btrfs filesystem in the Linux Kernel, where pages are not unlocked on failure of the cow file range function. This could potentially lead to security...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2177-1 Rating: important References: 1055117 1061840 1065729 1103269 1118212 1153274 1154353 1156395 1158266 1167773 1176447 1177282 1178134 1180100 1183405 1188885 1195826 1196426 1196478 1196570...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:2173-1 Rating: important References: 1177282 1199365 1200015 1200143 1200144 1200206 1200207 1200249 1200259 1200263 1200268 1200529 Cross-References: CVE-2020-26541 CVE-2022-1966 CVE-2022-1974...

Ubuntu: Security Advisory (USN-4254-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.62 and fixes at least the following security issues: A use-after-free flaw was found in the Linux kernel Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a...

PT-2022-6836 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the btrfs get dev args from path function in the fs/btrfs/volumes.c file of the btrfs file system in the Linux Kernel. This issue is related to the u...

The vulnerability of the btrfs_queue_work function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btrfsqueuework function fs/btrfs/async-thread.c in the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...