In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix abort logic in btrfs_replace_file_extents
Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong.
The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses this path too. Instead we need to abort if there is an error, and the only error we _don't_ abort on is -EOPNOTSUPP and only if we came from the clone file code.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-devel | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade kernel-source-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub