In the Linux kernel, the following vulnerability has been resolved:
btrfs: dev-replace: properly validate device names
There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getname_kernel().
Add a helper that validates both source and target device name buffers. For devid as the source initialize the buffer to empty string in case something tries to read it later.
This was originally analyzed and fixed in a different way by Edward Adam Davis (see links).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-livepatch-5.15.152-100.162Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-azure-baseUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuild | May 15, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-kvm | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub