fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2020 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 27, 2019 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel | Jan 3, 2020 | Nov 14, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Jan 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 14, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-genericUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gke-4.15Upgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-azureUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-4.4.0-173-genericUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-oracle-edgeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1101-awsUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-5.0.0-1024-awsUpgrade linux-image-4.15.0-1071-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-awsUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.4.0-173-powerpc-e500mc | Jan 29, 2020 | Nov 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub