Vulnerability in btrfs: do not BUG_ON in link_to_fixup_dir
Summary
GSD-2021-1000688: btrfs: do not BUG_ON in link_to_fixup_dir. Affects Kernel versions < e934c4ee17b33bafb0444f2f9766cda7166d3c40. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a file system for Linux that provides advanced features such as snapshots, pooling, and data integrity. It is widely used in various Linux distributions. However, a vulnerability has been discovered in the package that can lead to a denial of service (DoS) attack or potential security breaches.
Vulnerability Detail
The vulnerability in btrfs occurs in the link_to_fixup_dir function. This function contains a BUG_ON statement that triggers a kernel panic if certain conditions are met. An attacker can exploit this vulnerability by crafting a malicious file system image that triggers the BUG_ON statement, causing the system to crash or become unresponsive. This vulnerability can be exploited remotely if an attacker can trick a user or system into mounting a malicious file system image.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The vulnerability in btrfs can lead to severe consequences, including system crashes and potential security breaches. It is highly recommended to update the Linux Kernel to the latest version to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
btrfs is a file system for Linux that provides advanced features such as snapshots, pooling, and data integrity.
This vulnerability can lead to a denial of service (DoS) attack or potential security breaches if exploited by an attacker.
An attacker can exploit this vulnerability by crafting a malicious file system image that triggers a kernel panic, causing the system to crash or become unresponsive.
Yes, this vulnerability can be exploited remotely if an attacker can trick a user or system into mounting a malicious file system image.
No, there is no known workaround. It is crucial to update the Linux Kernel to the recommended version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
