In the Linux kernel, the following vulnerability has been resolved:
btrfs: use latest_dev in btrfs_show_devname
The test case btrfs/238 reports the warning below:
WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs] CPU: 2 PID: 1 Comm: systemd Tainted: G W O 5.14.0-rc1-custom #72 Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 Call trace: btrfs_show_devname+0x108/0x1b4 [btrfs] show_mountinfo+0x234/0x2c4 m_show+0x28/0x34 seq_read_iter+0x12c/0x3c4 vfs_read+0x29c/0x2c8 ksys_read+0x80/0xec __arm64_sys_read+0x28/0x34 invoke_syscall+0x50/0xf8 do_el0_svc+0x88/0x138 el0_svc+0x2c/0x8c el0t_64_sync_handler+0x84/0xe4 el0t_64_sync+0x198/0x19c
Reason: While btrfs_prepare_sprout() moves the fs_devices::devices into fs_devices::seed_list, the btrfs_show_devname() searches for the devices and found none, leading to the warning as in above.
Fix: latest_dev is updated according to the changes to the device list. That means we could use the latest_dev->name to show the device name in /proc/self/mounts, the pointer will be always valid as it's assigned before the device is deleted from the list in remove or replace. The RCU protection is sufficient as the device structure is freed after synchronization.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1171-kvmUpgrade linux-image-oracle-5.4Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1197-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-4.15Upgrade linux-image-4.15.0-1182-gcpUpgrade linux-image-aws-fips-5.4Upgrade linux-image-4.15.0-2090-gcp-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1160-azure-fipsUpgrade linux-image-raspi-5.4Upgrade linux-image-4.4.0-278-lowlatencyUpgrade linux-image-5.4.0-1139-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-2127-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-oemUpgrade linux-image-5.4.0-1102-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-azure-fips-5.4Upgrade linux-image-4.4.0-1122-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1154-oracleUpgrade linux-image-4.4.0-278-genericUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-kvmUpgrade linux-image-azure-fips-4.15Upgrade linux-image-5.4.0-227-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-5.4Upgrade linux-image-4.15.0-2106-azure-fipsUpgrade linux-image-5.4.0-1060-iotUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1159-gcpUpgrade linux-image-4.4.0-1153-kvmUpgrade linux-image-5.4.0-227-lowlatencyUpgrade linux-image-5.4.0-1156-awsUpgrade linux-image-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1074-xilinx-zynqmpUpgrade linux-image-azure-4.15Upgrade linux-image-snapdragon-5.4Upgrade linux-image-4.15.0-1144-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-kvm-5.4Upgrade linux-image-aws-fips-4.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1189-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-1152-awsUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1155-aws-fipsUpgrade linux-image-generic-5.4Upgrade linux-image-4.15.0-247-genericUpgrade linux-image-5.4.0-1130-fipsUpgrade linux-image-ibm-5.4Upgrade linux-image-fips-5.4Upgrade linux-image-5.4.0-1161-azureUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-247-lowlatencyUpgrade linux-image-aws-4.15Upgrade linux-image-4.15.0-1151-oracleUpgrade linux-image-4.4.0-1190-awsUpgrade linux-image-gcp-4.15Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-5.4.0-1159-gcp-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-5.4Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-5.4Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1160-azureUpgrade linux-image-raspi2Upgrade linux-image-aws-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1143-kvmUpgrade linux-image-5.4.0-227-generic-lpae | Jun 26, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub