In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
Patch series "nilfs2: fix potential issues with empty b-tree nodes".
This series addresses three potential issues with empty b-tree nodes that can occur with corrupted filesystem images, including one recently discovered by syzbot.
This patch (of 3):
If a b-tree is broken on the device, and the b-tree height is greater than 2 (the level of the root node is greater than 1) even if the number of child nodes of the b-tree root is 0, a NULL pointer dereference occurs in nilfs_btree_prepare_insert(), which is called from nilfs_btree_insert().
This is because, when the number of child nodes of the b-tree root is 0, nilfs_btree_do_lookup() does not set the block buffer head in any of path[x].bp_bh, leaving it as the initial value of NULL, but if the level of the b-tree root node is greater than 1, nilfs_btree_get_nonroot_node(), which accesses the buffer memory of path[x].bp_bh, is called.
Fix this issue by adding a check to nilfs_btree_root_broken(), which performs sanity checks when reading the root node from the device, to detect this inconsistency.
Thanks to Lizhi Xu for trying to solve the bug and clarifying the cause early on.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.10.227-219.884Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-virtualUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-intelUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmp | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub