Vulnerability in btrfs: Return Whole Extents in fiemap
Summary
GSD-2021-1000590: btrfs: return whole extents in fiemap. Affects Kernel versions < c7e0c6047c4f2a9664e48e3671af80c513220a44. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a part of the Linux Kernel ecosystem and is responsible for providing support for the Btrfs file system. Btrfs is a modern copy-on-write (CoW) file system that offers advanced features such as snapshots, pooling, and checksums. It is widely used in Linux distributions and provides efficient data management capabilities. However, a vulnerability has been discovered in the btrfs package that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the btrfs package allows attackers to obtain sensitive information by exploiting the fiemap functionality. The fiemap system call is used to retrieve information about file extents, which are contiguous blocks of data on disk. The vulnerability allows attackers to retrieve whole extents, potentially exposing sensitive data that should not be accessible. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the btrfs package that allows the retrieval of whole extents in fiemap has been identified. It is recommended to update the Linux Kernel to version v5.10.42 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The btrfs package is a part of the Linux Kernel ecosystem and provides support for the Btrfs file system.
The fiemap functionality is a system call used to retrieve information about file extents in the Btrfs file system.
An extent is a contiguous block of data on disk in the Btrfs file system.
The impact of this vulnerability is the potential exposure of sensitive data that should not be accessible.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
