Double Complete Bio on Errors during Compressed Reads in btrfs
Summary
GSD-2022-1001471: btrfs: do not double complete bio on errors during compressed reads. Affects Kernel versions < 4a4ceb2b990771c374d85d496a1a45255dde48e3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The btrfs package is a file system for Linux that provides advanced features such as snapshots, pooling, and checksums. It is widely used in various Linux distributions. However, a vulnerability has been discovered in btrfs that can lead to double completion of a bio on errors during compressed reads.
Vulnerability Detail
The vulnerability in btrfs occurs when there are errors during compressed reads. In such cases, the bio is completed twice, which can result in unexpected behavior and potential security risks. Attackers may be able to exploit this vulnerability to cause denial of service or execute arbitrary code. The issue has been fixed in Linux Kernel version v5.16.19 by commit 4a4ceb2b990771c374d85d496a1a45255dde48e3.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The vulnerability in btrfs that causes double completion of a bio on errors during compressed reads has been fixed in Linux Kernel version v5.16.19. It is important to update the Linux Kernel to the fixed version to mitigate the potential security risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
btrfs is a file system for Linux that provides advanced features such as snapshots, pooling, and checksums.
The vulnerability can lead to unexpected behavior and potential security risks, including denial of service and arbitrary code execution.
To fix this vulnerability, update the Linux Kernel to version v5.16.19 or later.
There is no specific workaround mentioned for this vulnerability. Updating the Linux Kernel is the recommended solution.
For more information, refer to the provided references link in the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
