In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate 'add_size' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-libbpf-static | Feb 26, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade dtb-armUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade kernel-source-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8 | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub