In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix abort logic in btrfs_replace_file_extents
Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong.
The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses this path too. Instead we need to abort if there is an error, and the only error we _don't_ abort on is -EOPNOTSUPP and only if we came from the clone file code.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade dtb-armUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-apm | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub