Vulnerability in btrfs: fixup error handling in fixup_inode_link_counts
Summary
GSD-2021-1000744: btrfs: fixup error handling in fixup_inode_link_counts. Affects Kernel versions < c5cfa81562174e585ecc40bf8766835abd058572. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a part of the Linux Kernel ecosystem and is responsible for providing support for the B-tree file system. It is widely used in Linux distributions and offers advanced features such as snapshots, compression, and RAID. The vulnerability in question affects the error handling mechanism in the fixup_inode_link_counts function of btrfs.
Vulnerability Detail
The vulnerability arises from a flaw in the error handling of the fixup_inode_link_counts function in btrfs. This flaw could potentially be exploited by an attacker to trigger a denial-of-service condition or execute arbitrary code with elevated privileges. The vulnerability was introduced in an earlier version of the Linux Kernel and has been fixed in version v4.19.194 by commit c5cfa81562174e585ecc40bf8766835abd058572.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in btrfs related to error handling in fixup_inode_link_counts can be mitigated by updating the Linux Kernel to version v4.19.194 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
Btrfs is a file system that provides advanced features such as snapshots, compression, and RAID. It is widely used in Linux distributions.
This vulnerability could potentially lead to a denial-of-service condition or allow an attacker to execute arbitrary code with elevated privileges.
To fix this vulnerability, update the Linux Kernel to version v4.19.194 or later.
No specific workaround has been mentioned for this vulnerability.
For more details, you can refer to the vulnerability report at the following source: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000744.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
