In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Oct 2, 2020 | Dec 8, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Dec 8, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Dec 8, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2020 | Dec 10, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2019 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1098-azureUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-4.15.0-121-genericUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1072-gke | Oct 14, 2020 | Dec 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub