{"id":"CVE-2021-47145","state":"PUBLISHED","title":"btrfs: do not BUG_ON in link_to_fixup_dir","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not BUG_ON in link_to_fixup_dir\n\nWhile doing error injection testing I got the following panic\n\n  kernel BUG at fs/btrfs/tree-log.c:1862!\n  invalid opcode: 0000 [#1] SMP NOPTI\n  CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ #305\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-2.fc32 04/01/2014\n  RIP: 0010:link_to_fixup_dir+0xd5/0xe0\n  RSP: 0018:ffffb5800180fa30 EFLAGS: 00010216\n  RAX: fffffffffffffffb RBX: 00000000fffffffb RCX: ffff8f595287faf0\n  RDX: ffffb5800180fa37 RSI: ffff8f5954978800 RDI: 0000000000000000\n  RBP: ffff8f5953af9450 R08: 0000000000000019 R09: 0000000000000001\n  R10: 000151f408682970 R11: 0000000120021001 R12: ffff8f5954978800\n  R13: ffff8f595287faf0 R14: ffff8f5953c77dd0 R15: 0000000000000065\n  FS:  00007fc5284c8c40(0000) GS:ffff8f59bbd00000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007fc5287f47c0 CR3: 000000011275e002 CR4: 0000000000370ee0\n  Call Trace:\n   replay_one_buffer+0x409/0x470\n   ? btree_read_extent_buffer_pages+0xd0/0x110\n   walk_up_log_tree+0x157/0x1e0\n   walk_log_tree+0xa6/0x1d0\n   btrfs_recover_log_trees+0x1da/0x360\n   ? replay_one_extent+0x7b0/0x7b0\n   open_ctree+0x1486/0x1720\n   btrfs_mount_root.cold+0x12/0xea\n   ? __kmalloc_track_caller+0x12f/0x240\n   legacy_get_tree+0x24/0x40\n   vfs_get_tree+0x22/0xb0\n   vfs_kern_mount.part.0+0x71/0xb0\n   btrfs_mount+0x10d/0x380\n   ? vfs_parse_fs_string+0x4d/0x90\n   legacy_get_tree+0x24/0x40\n   vfs_get_tree+0x22/0xb0\n   path_mount+0x433/0xa10\n   __x64_sys_mount+0xe3/0x120\n   do_syscall_64+0x3d/0x80\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nWe can get -EIO or any number of legitimate errors from\nbtrfs_search_slot(), panicing here is not the appropriate response.  The\nerror path for this code handles errors properly, simply return the\nerror.","publishedAt":"2024-03-25T09:07:42.384Z","updatedAt":"2026-05-11T13:48:54.208Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"76bfd8ac20bebeae599452a03dfc5724c0475dcf","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"e934c4ee17b33bafb0444f2f9766cda7166d3c40","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"0eaf383c6a4a83c09f60fd07a1bea9f1a9181611","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"0ed102453aa1cd12fefde8f6b60b9519b0b1f003","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"7e13db503918820e6333811cdc6f151dcea5090a","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"b545442133580dcb2f2496133bf850824d41255c","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"91df99a6eb50d5a1bc70fff4a09a0b7ae6aab96d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/tree-log.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.29","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.29","versionType":"semver"},{"version":"4.4.271","status":"unaffected","lessThanOrEqual":"4.4.*","versionType":"semver"},{"version":"4.9.271","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.235","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.193","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.124","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.42","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.12.9","status":"unaffected","lessThanOrEqual":"5.12.*","versionType":"semver"},{"version":"5.13","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/tree-log.c"]}],"references":["https://git.kernel.org/stable/c/76bfd8ac20bebeae599452a03dfc5724c0475dcf","https://git.kernel.org/stable/c/e934c4ee17b33bafb0444f2f9766cda7166d3c40","https://git.kernel.org/stable/c/0eaf383c6a4a83c09f60fd07a1bea9f1a9181611","https://git.kernel.org/stable/c/6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa","https://git.kernel.org/stable/c/0ed102453aa1cd12fefde8f6b60b9519b0b1f003","https://git.kernel.org/stable/c/7e13db503918820e6333811cdc6f151dcea5090a","https://git.kernel.org/stable/c/b545442133580dcb2f2496133bf850824d41255c","https://git.kernel.org/stable/c/91df99a6eb50d5a1bc70fff4a09a0b7ae6aab96d"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:19.404Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/47xxx/CVE-2021-47145.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47145","state":"PUBLISHED","datePublished":"2024-03-25T09:07:42.384Z","dateUpdated":"2026-05-11T13:48:54.208Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-03-04T18:12:48.845Z"},"containers":{"cna":{"title":"btrfs: do not BUG_ON in link_to_fixup_dir","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: do not BUG_ON in link_to_fixup_dir\n\nWhile doing error injection testing I got the following panic\n\n  kernel BUG at fs/btrfs/tree-log.c:1862!\n  invalid opcode: 0000 [#1] SMP NOPTI\n  CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ #305\n  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.13.0-2.fc32 04/01/2014\n  RIP: 0010:link_to_fixup_dir+0xd5/0xe0\n  RSP: 0018:ffffb5800180fa30 EFLAGS: 00010216\n  RAX: fffffffffffffffb RBX: 00000000fffffffb RCX: ffff8f595287faf0\n  RDX: ffffb5800180fa37 RSI: ffff8f5954978800 RDI: 0000000000000000\n  RBP: ffff8f5953af9450 R08: 0000000000000019 R09: 0000000000000001\n  R10: 000151f408682970 R11: 0000000120021001 R12: ffff8f5954978800\n  R13: ffff8f595287faf0 R14: ffff8f5953c77dd0 R15: 0000000000000065\n  FS:  00007fc5284c8c40(0000) GS:ffff8f59bbd00000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 00007fc5287f47c0 CR3: 000000011275e002 CR4: 0000000000370ee0\n  Call Trace:\n   replay_one_buffer+0x409/0x470\n   ? btree_read_extent_buffer_pages+0xd0/0x110\n   walk_up_log_tree+0x157/0x1e0\n   walk_log_tree+0xa6/0x1d0\n   btrfs_recover_log_trees+0x1da/0x360\n   ? replay_one_extent+0x7b0/0x7b0\n   open_ctree+0x1486/0x1720\n   btrfs_mount_root.cold+0x12/0xea\n   ? __kmalloc_track_caller+0x12f/0x240\n   legacy_get_tree+0x24/0x40\n   vfs_get_tree+0x22/0xb0\n   vfs_kern_mount.part.0+0x71/0xb0\n   btrfs_mount+0x10d/0x380\n   ? vfs_parse_fs_string+0x4d/0x90\n   legacy_get_tree+0x24/0x40\n   vfs_get_tree+0x22/0xb0\n   path_mount+0x433/0xa10\n   __x64_sys_mount+0xe3/0x120\n   do_syscall_64+0x3d/0x80\n   entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nWe can get -EIO or any number of legitimate errors from\nbtrfs_search_slot(), panicing here is not the appropriate response.  The\nerror path for this code handles errors properly, simply return the\nerror."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"76bfd8ac20bebeae599452a03dfc5724c0475dcf","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"e934c4ee17b33bafb0444f2f9766cda7166d3c40","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"0eaf383c6a4a83c09f60fd07a1bea9f1a9181611","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"0ed102453aa1cd12fefde8f6b60b9519b0b1f003","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"7e13db503918820e6333811cdc6f151dcea5090a","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"b545442133580dcb2f2496133bf850824d41255c","versionType":"git"},{"version":"e02119d5a7b4396c5a872582fddc8bd6d305a70a","status":"affected","lessThan":"91df99a6eb50d5a1bc70fff4a09a0b7ae6aab96d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/tree-log.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.29","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.29","versionType":"semver"},{"version":"4.4.271","status":"unaffected","lessThanOrEqual":"4.4.*","versionType":"semver"},{"version":"4.9.271","status":"unaffected","lessThanOrEqual":"4.9.*","versionType":"semver"},{"version":"4.14.235","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.193","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.124","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.42","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.12.9","status":"unaffected","lessThanOrEqual":"5.12.*","versionType":"semver"},{"version":"5.13","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/tree-log.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/76bfd8ac20bebeae599452a03dfc5724c0475dcf"},{"url":"https://git.kernel.org/stable/c/e934c4ee17b33bafb0444f2f9766cda7166d3c40"},{"url":"https://git.kernel.org/stable/c/0eaf383c6a4a83c09f60fd07a1bea9f1a9181611"},{"url":"https://git.kernel.org/stable/c/6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa"},{"url":"https://git.kernel.org/stable/c/0ed102453aa1cd12fefde8f6b60b9519b0b1f003"},{"url":"https://git.kernel.org/stable/c/7e13db503918820e6333811cdc6f151dcea5090a"},{"url":"https://git.kernel.org/stable/c/b545442133580dcb2f2496133bf850824d41255c"},{"url":"https://git.kernel.org/stable/c/91df99a6eb50d5a1bc70fff4a09a0b7ae6aab96d"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T13:48:54.208Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"4.4.271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"4.9.271"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"4.14.235"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"4.19.193"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.4.124"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.10.42"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.12.9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.29","versionEndExcluding":"5.13"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2021-47145","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-03-25T14:12:43.029638Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:14:28.150Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/76bfd8ac20bebeae599452a03dfc5724c0475dcf","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/e934c4ee17b33bafb0444f2f9766cda7166d3c40","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/0eaf383c6a4a83c09f60fd07a1bea9f1a9181611","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/6eccfb28f8dca70c9b1b3bb3194ca54cbe73a9fa","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/0ed102453aa1cd12fefde8f6b60b9519b0b1f003","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/7e13db503918820e6333811cdc6f151dcea5090a","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/b545442133580dcb2f2496133bf850824d41255c","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/91df99a6eb50d5a1bc70fff4a09a0b7ae6aab96d","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T05:24:39.917Z"}}]}}}