In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate 'add_size' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headers | Feb 26, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-amazon | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04 | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub