In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted btrfs filesystem image, performing some operations, and then making a syncfs system call can lead to a use-after-free in try_merge_free_space in fs/btrfs/free-space-cache.c because the pointer to a left data structure can be the same as the pointer to a right data structure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-198-152-320amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Oct 2, 2020 | Dec 8, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Oct 28, 2020 | Dec 8, 2019 |
| Debian | debian-upgrade-linux | Sep 28, 2020 | Dec 8, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-kernel-uek | Nov 11, 2020 | Dec 10, 2019 |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Dec 8, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1056-oracleubuntu-upgrade-linux-image-4-15-0-1057-oracleubuntu-upgrade-linux-image-4-15-0-1072-gkeubuntu-upgrade-linux-image-4-15-0-1073-raspi2ubuntu-upgrade-linux-image-4-15-0-1077-kvmubuntu-upgrade-linux-image-4-15-0-1085-awsubuntu-upgrade-linux-image-4-15-0-1086-awsubuntu-upgrade-linux-image-4-15-0-1086-gcpubuntu-upgrade-linux-image-4-15-0-1089-snapdragonubuntu-upgrade-linux-image-4-15-0-1098-azureubuntu-upgrade-linux-image-4-15-0-1099-azureubuntu-upgrade-linux-image-4-15-0-1099-oemubuntu-upgrade-linux-image-4-15-0-120-genericubuntu-upgrade-linux-image-4-15-0-120-generic-lpaeubuntu-upgrade-linux-image-4-15-0-120-lowlatencyubuntu-upgrade-linux-image-4-15-0-121-genericubuntu-upgrade-linux-image-4-15-0-121-generic-lpaeubuntu-upgrade-linux-image-4-15-0-121-lowlatencyubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-4-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04 | Oct 14, 2020 | Dec 8, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Dec 8, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub