In the Linux kernel, the following vulnerability has been resolved:
btrfs: dev-replace: properly validate device names
There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getname_kernel().
Add a helper that validates both source and target device name buffers. For devid as the source initialize the buffer to empty string in case something tries to read it later.
This was originally analyzed and fixed in a different way by Edward Adam Davis (see links).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.152-100.162Upgrade python-perf-debuginfoUpgrade perf-debuginfo | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-sourceUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kernel-azure | May 15, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub