fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verify_dev_extents NULL pointer dereference via a crafted btrfs image because fs_devices->devices is mishandled within find_device, aka CID-09ba3bc9dd15.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 17, 2020 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-tools | Dec 27, 2019 | Nov 14, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-source | Jan 3, 2020 | Nov 14, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 12, 2020 | Jan 19, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 14, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-173-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1053-kvmUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-88-lowlatencyUpgrade linux-image-5.0.0-1010-oracleUpgrade linux-image-4.15.0-1069-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-173-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1052-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1033-oracleUpgrade linux-image-4.4.0-173-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-88-genericUpgrade linux-image-4.15.0-1072-snapdragonUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-173-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-173-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1060-awsUpgrade linux-image-4.4.0-1132-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-173-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-5.0.0-1024-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1071-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-173-powerpc-e500mcUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-88-generic-lpaeUpgrade linux-image-4.4.0-1128-raspi2Upgrade linux-image-4.4.0-1101-awsUpgrade linux-image-gkeUpgrade linux-image-5.0.0-1029-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.15.0-1055-raspi2Upgrade linux-image-4.15.0-1055-gcpUpgrade linux-image-4.4.0-1061-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-edgeUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1029-gkeUpgrade linux-image-4.4.0-1065-kvmUpgrade linux-image-aws-edge | Jan 29, 2020 | Nov 14, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 14, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub