Vulnerability in btrfs Package: Premature Return from btrfs_commit_transaction()
Summary
GSD-2022-1000762: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction(). Affects Kernel versions >= d0c2f4fa555e70324ec2a129b822ab58f172cc62, < 725a6ac389b182261af174176e561a36b0f39ffc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The btrfs package is a part of the Linux Kernel ecosystem and is responsible for providing support for the B-tree file system. It offers advanced features such as snapshots, pooling, and checksums to enhance data integrity and performance. However, a vulnerability has been identified in the package that could lead to a crash during relocation due to a premature return from the btrfs_commit_transaction() function.
Vulnerability Detail
The vulnerability arises from a premature return statement in the btrfs_commit_transaction() function. This issue was introduced in version v5.12 of the Linux Kernel and affects all subsequent versions until v5.15.27. An attacker could potentially exploit this vulnerability to cause a crash during relocation, leading to a denial of service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the btrfs package in the Linux Kernel is vulnerable to a crash during relocation due to a premature return from the btrfs_commit_transaction() function. To mitigate this vulnerability, it is crucial to update the kernel to version v5.15.27 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The btrfs package is a part of the Linux Kernel ecosystem and provides support for the B-tree file system. It offers advanced features such as snapshots, pooling, and checksums.
The vulnerability could lead to a crash during relocation, resulting in a denial of service (DoS) condition.
To fix this vulnerability, update the Linux Kernel to version v5.15.27 or later.
No workaround has been provided for this vulnerability.
For more details, refer to the vulnerability report with ID GSD-2022-1000762.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
