In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix ulist leaks in error paths of qgroup self tests
In the test_no_shared_qgroup() and test_multiple_refs() qgroup self tests, if we fail to add the tree ref, remove the extent item or remove the extent ref, we are returning from the test function without freeing the "old_roots" ulist that was allocated by the previous calls to btrfs_find_all_roots(). Fix that by calling ulist_free() before returning.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.79-51.138 | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-aws-5.15Upgrade linux-iotUpgrade linux-azure-4.15Upgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-gkeUpgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-hweUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-ibmUpgrade linux-realtimeUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-nvidiaUpgrade linux-azureUpgrade linux-aws-hwe | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub