In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: fix use-after-free due to race with dev replace
While loading a zone's info during creation of a block group, we can race with a device replace operation and then trigger a use-after-free on the device that was just replaced (source device of the replace operation).
This happens because at btrfs_load_zone_info() we extract a device from the chunk map into a local variable and then use the device while not under the protection of the device replace rwsem. So if there's a device replace operation happening when we extract the device and that device is the source of the replace operation, we will trigger a use-after-free if before we finish using the device the replace operation finishes and frees the device.
Fix this by enlarging the critical section under the protection of the device replace rwsem so that all uses of the device are done inside the critical section.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf | Mar 10, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-cavium | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-5.15.0-122-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1070-awsUpgrade linux-image-6.8.0-1011-raspi | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub