56 matches found
PT-2025-25925
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A space cache corruption and potential double allocation issue has been identified in the Linux kernel. The issue arises from a race between caching free space for a block group and...
PT-2025-20356
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, related to the btrfs file system. The issue occurs when a RAID1 block group is created and a write pointer mismatch between the disks in the...
Linux Distros Unpatched Vulnerability : CVE-2024-26726
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: don't drop extentmap for free space inode on write error While running the CI for an unrelated change I hit the following panic with generic/648 on...
CVE-2024-26726 btrfs: don't drop extent_map for free space inode on write error
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't drop extentmap for free space inode on write error While running the CI for an unrelated change I hit the following panic with generic/648 on btrfsholesspacecache. assertion failed: blockstart != EXTENTMAPHOLE, in...
PT-2024-21491
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc2+ Description The issue arises when the Linux kernel fails to write out the free space cache in one instance and then attempts to write it again. On the second pass, it calls btrfs get extent on the inod...
SUSE CVE-2019-19448
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in trymergefreespace in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the...
PT-2022-34992 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the btrfs filesystem, where a call to btrfs remove free space cache locked is made on cache load failure. The actual impact and attack plausibility have not yet been...
GSD-2022-1005441 btrfs: fix space cache corruption and potential double allocations
btrfs: fix space cache corruption and potential double allocations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...
GSD-2022-1005037 btrfs: fix space cache corruption and potential double allocations
btrfs: fix space cache corruption and potential double allocations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...
PT-2022-33699 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.15.64 Description: The issue concerns a space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
PT-2022-33295 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.5 Description: The issue concerns space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...
The vulnerability of the try_merge_free_space function in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the trymergefreespace function located in fs/btrfs/free-space-cache.c in the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information ...
Linux kernel resource management error vulnerability (CNVD-2019-44742)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the 'trymergefreespace' function in the fs/btrfs/free-space-cache.c file in Linux kernel versions 5.0.21 and 5.3.11...
DEBIAN-CVE-2019-19448
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in trymergefreespace in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the...
UBUNTU-CVE-2019-19448
In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in trymergefreespace in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the...
PT-2019-4484 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.0.21 and 5.3.11 Description: The issue is related to the use of memory after it has been freed in the try merge free space function of the Linux kernel, specifically in the fs/btrfs/free-space-cache.c file. This can be...