In the Linux kernel, the following vulnerability has been resolved:
btrfs: add a sanity check for btrfs root in btrfs_search_slot()
Syzbot reports a null-ptr-deref in btrfs_search_slot().
The reproducer is using rescue=ibadroots, and the extent tree root is corrupted thus the extent tree is NULL.
When scrub tries to search the extent tree to gather the needed extent info, btrfs_search_slot() doesn't check if the target root is NULL or not, resulting the null-ptr-deref.
Add sanity check for btrfs root before using it in btrfs_search_slot().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.176-118.170 | Mar 14, 2025 | Jan 8, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernelUpgrade perf-debuginfo | Mar 27, 2025 | Jan 8, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Jan 8, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04bUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegraUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-nolpae | Mar 28, 2025 | Jan 8, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub