Vulnerability in Kernel Package: btrfs: make search_csum_tree return 0 if we get -EFBIG
Summary
GSD-2022-1001790: btrfs: make search_csum_tree return 0 if we get -EFBIG. Affects Kernel versions < c78bada18aa11ee70a8e26e1972595539617425a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a crucial component of the Linux operating system. It provides the core functionality and acts as an interface between the hardware and software layers. The btrfs (B-tree file system) is a modern file system implemented within the Kernel. It offers advanced features such as snapshots, checksums, and RAID-like capabilities. However, a vulnerability has been discovered in the btrfs module that affects the search_csum_tree function.
Vulnerability Detail
The search_csum_tree function in the btrfs module of the Kernel package is susceptible to a security vulnerability. When encountering an error code of -EFBIG (file too large), the function does not handle it properly and returns an incorrect value. This vulnerability could potentially be exploited by an attacker to manipulate the search_csum_tree function and cause unexpected behavior or denial of service. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
In conclusion, a vulnerability has been identified in the btrfs module of the Kernel package. It is crucial to update the Kernel package to version v5.15.33 or a newer version to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a critical component of the Linux operating system that provides core functionality and acts as an interface between hardware and software layers.
btrfs is a modern file system implemented within the Kernel package. It offers advanced features such as snapshots, checksums, and RAID-like capabilities.
The search_csum_tree function is a part of the btrfs module in the Kernel package. It is responsible for searching the checksum tree within the file system.
The impact of this vulnerability is currently unknown. While it could potentially be exploited to cause unexpected behavior or denial of service, the actual impact and attack plausibility have not been proven.
To fix this vulnerability, it is recommended to update the Kernel package to version v5.15.33 or any subsequent version that includes the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
