Vulnerability in btrfs: do not BUG_ON in link_to_fixup_dir
Summary
GSD-2021-1000588: btrfs: do not BUG_ON in link_to_fixup_dir. Affects Kernel versions < 7e13db503918820e6333811cdc6f151dcea5090a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a file system for the Linux kernel that provides advanced features such as snapshots, pooling, and checksums. It is widely used in various Linux distributions. The link_to_fixup_dir function in btrfs has a vulnerability that can lead to a denial of service (DoS) attack. This function contains a BUG_ON statement that triggers a kernel panic when certain conditions are met, causing the system to crash.
Vulnerability Detail
The vulnerability in btrfs arises from the use of the BUG_ON statement in the link_to_fixup_dir function. When this function is called with specific inputs, it triggers a kernel panic, resulting in a DoS condition. An attacker can exploit this vulnerability by crafting malicious inputs that trigger the BUG_ON statement, causing the system to crash. The impact of this vulnerability is a complete loss of availability, as the affected system becomes unresponsive and requires a reboot to recover.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the patch or update the Linux Kernel to the fixed version to mitigate the risk of exploitation.
Conclusion
The vulnerability in btrfs that triggers a kernel panic in the link_to_fixup_dir function can lead to a denial of service (DoS) attack, causing the affected system to crash. To mitigate this risk, it is crucial to update the Linux Kernel to version v5.10.42 or later, which includes the fix for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
btrfs is a file system for the Linux kernel that provides advanced features such as snapshots, pooling, and checksums.
The vulnerability can lead to a denial of service (DoS) attack, causing the affected system to crash and become unresponsive.
An attacker can exploit this vulnerability by crafting malicious inputs that trigger the BUG_ON statement in the link_to_fixup_dir function, causing a kernel panic and crashing the system.
No, there is no known workaround for this vulnerability. It is necessary to update the Linux Kernel to the fixed version.
To fix this vulnerability, update the Linux Kernel to version v5.10.42 or later, which includes the necessary patch to address the issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
