UBUNTU-CVE-2023-53187

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of new block group that became unused If a task creates a new block group and that block group becomes unused before we finish its creation, at btrfscreatependingblockgroups, then when btrfsmarkbgunused ...

CVE-2025-39800 btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfscopyroot If we find an unexpected generation for the extent buffer we are cloning at btrfscopyroot, we just WARNON and don't error out and abort the transaction, meanin...

CVE-2025-39800

CVE-2025-39800 affects the Linux kernel’s btrfs subsystem, specifically the btrfs_copy_root() path. The issue occurs when cloning an extent buffer with an unexpected eb generation: instead of aborting the transaction, the code would WARN_ON() and allow metadata to persist with the unexpected gene...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ext4clumapped function incorrectly searching for a non-existent extent tree when both the bigalloc and...

PT-2025-37588

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw where converting files with inline data to extents, with both bigalloc and inline options enabled, can lead to invalid extent status cache content,...

PT-2025-37602

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the btrfs subsystem related to extent map handling during read operations. Specifically, a use-after-free condition can occur when processing a...

CVE-2025-39738

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes BUG There is an internal report that balance triggered transaction abort, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsize 33 extent...

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

DEBIAN-CVE-2025-38691

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function exttreepreparecommit reallocates a larger buffer to retry encoding extents, the "layoutupdatepages" page arr...

CVE-2025-38691

Technical details about CVE-2025-38691 are not publicly provided in the supplied connected documents. Monitor vendor advisories (Debian, Mageia, Amazon Linux) for patches and mitigations and update accordingly.

btrfs: exit after state insertion failure at btrfs_convert_extent_bit()

...

btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

...

btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc()

...

f2fs: fix KMSAN uninit-value in extent_info usage

...

btrfs: don't drop extent_map for free space inode on write error

...

btrfs: fix deadlock with fiemap and extent locking

...

Linux Distros Unpatched Vulnerability : CVE-2021-46989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: hfsplus: prevent corruption in shrinking truncate I believe there are some issues introduced...

PT-2025-49071

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc5 Description The Linux kernel contains an uninitialized value issue within the hfsplus ext cache extent function. This issue was identified by syzbot and can lead to a kernel panic. The root cause is an...

Linux Distros Unpatched Vulnerability : CVE-2025-38579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extentinfo usage KMSAN reported a use of uninitialized value...

Linux Distros Unpatched Vulnerability : CVE-2018-14610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.17.10. There is out-of-bounds access in writeextentbuffer when mounting and operating a crafted btrfs imag...