fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2020 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Dec 27, 2019 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jan 3, 2020 | Nov 14, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Jan 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 14, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1061-awsUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-gkeUpgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1072-snapdragon | Jan 29, 2020 | Nov 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub