In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.198-152.320Upgrade kernel-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2020 | Dec 8, 2019 |
| Amazon_linux | — | Upgrade kernel | Oct 28, 2020 | Dec 8, 2019 |
| Debian | — | Upgrade linux | Sep 28, 2020 | Dec 8, 2019 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2020 | Dec 10, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 8, 2019 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1073-raspi2Upgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-4.15.0-120-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1056-oracleUpgrade linux-image-4.15.0-1085-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1098-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1086-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1089-snapdragonUpgrade linux-image-4.15.0-1057-oracleUpgrade linux-image-4.15.0-1086-awsUpgrade linux-image-4.15.0-1099-oemUpgrade linux-image-4.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-120-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1077-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.15.0-1072-gkeUpgrade linux-image-4.15.0-121-genericUpgrade linux-image-4.15.0-1099-azureUpgrade linux-image-azureUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-120-generic-lpaeUpgrade linux-image-4.15.0-121-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-kvm | Oct 14, 2020 | Dec 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub