In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix extent map use-after-free when adding pages to compressed bio
At add_ra_bio_pages() we are accessing the extent map to calculate 'add_size' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-develUpgrade kernel-devel | Feb 26, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-64kbUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-raspi | Dec 13, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub