In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate 'add_size' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Feb 26, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-alteraUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-virtual | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub