In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix abort logic in btrfs_replace_file_extents
Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong.
The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses this path too. Instead we need to abort if there is an error, and the only error we _don't_ abort on is -EOPNOTSUPP and only if we came from the clone file code.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.75-79.358 | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub