In the Linux kernel, the following vulnerability has been resolved:
btrfs: dev-replace: properly validate device names
There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getname_kernel().
Add a helper that validates both source and target device name buffers. For devid as the source initialize the buffer to empty string in case something tries to read it later.
This was originally analyzed and fixed in a different way by Edward Adam Davis (see links).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-livepatch-4.14.343-259.562 | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-toolsUpgrade kernel-libbpf-static | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 4, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade dtb-lgUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rt | May 15, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-genericUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-lowlatency-64k-hwe-20.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub