fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2020 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-headers | Dec 27, 2019 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernelUpgrade kernel-headers | Jan 3, 2020 | Nov 14, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Jan 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 14, 2019 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-genericUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-oracle-edgeUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-aws-edgeUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-embUpgrade linux-image-oemUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1029-gke | Jan 29, 2020 | Nov 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub