In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix abort logic in btrfs_replace_file_extents
Error injection testing uncovered a case where we'd end up with a corrupt file system with a missing extent in the middle of a file. This occurs because the if statement to decide if we should abort is wrong.
The only way we would abort in this case is if we got a ret != -EOPNOTSUPP and we called from the file clone code. However the prealloc code uses this path too. Instead we need to abort if there is an error, and the only error we _don't_ abort on is -EOPNOTSUPP and only if we came from the clone file code.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfo | May 22, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade dtb-armUpgrade kernel-rt-livepatch | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub