In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
Syzbot reported the following information leak for in btrfs_ioctl_logical_to_ino():
BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 lib/usercopy.c:40 instrument_copy_to_user include/linux/instrumented.h:114 [inline] _copy_to_user+0xbc/0x110 lib/usercopy.c:40 copy_to_user include/linux/uaccess.h:191 [inline] btrfs_ioctl_logical_to_ino+0x440/0x750 fs/btrfs/ioctl.c:3499 btrfs_ioctl+0x714/0x1260 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x261/0x450 fs/ioctl.c:890 __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:890 x64_sys_call+0x1883/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Uninit was created at: __kmalloc_large_node+0x231/0x370 mm/slub.c:3921 __do_kmalloc_node mm/slub.c:3954 [inline] __kmalloc_node+0xb07/0x1060 mm/slub.c:3973 kmalloc_node include/linux/slab.h:648 [inline] kvmalloc_node+0xc0/0x2d0 mm/util.c:634 kvmalloc include/linux/slab.h:766 [inline] init_data_container+0x49/0x1e0 fs/btrfs/backref.c:2779 btrfs_ioctl_logical_to_ino+0x17c/0x750 fs/btrfs/ioctl.c:3480 btrfs_ioctl+0x714/0x1260 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0x261/0x450 fs/ioctl.c:890 __x64_sys_ioctl+0x96/0xe0 fs/ioctl.c:890 x64_sys_call+0x1883/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f
Bytes 40-65535 of 65536 are uninitialized Memory access of size 65536 starts at ffff888045a40000
This happens, because we're copying a 'struct btrfs_data_container' back to user-space. This btrfs_data_container is allocated in 'init_data_container()' via kvmalloc(), which does not zero-fill the memory.
Fix this by using kvzalloc() which zeroes out the memory on allocation.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.10.216-204.855Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Nov 12, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-static | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-apmUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macros | Jun 12, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-2123-aws-fipsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-4.15.0-242-lowlatencyUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oracle-4.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1149-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-2086-gcp-fipsUpgrade linux-image-4.4.0-273-genericUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-aws-fips-4.15Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-4.15.0-1193-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-4.15Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-4.4.0-1119-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.4.0-1186-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-2102-azure-fipsUpgrade linux-image-aws-4.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-4.15.0-1147-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-4.15.0-1140-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-4.15.0-1185-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-gcp-4.15Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-242-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-4.15.0-1178-gcpUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.15.0-1168-kvmUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-273-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04 | Jul 15, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub