Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map use-after-free when adding pages to compressed bio At add_ra_bio_pages() we are accessing the extent map to calculate 'add_size' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6a4049102055250256623ab1875fabd89004bff8 to < c1cc3326e27b0bd7a2806b40bc48e49afaf951e7affected6a4049102055250256623ab1875fabd89004bff8 to < c205565e0f2f439f278a4a94ee97b67ef7b56ae8affected6a4049102055250256623ab1875fabd89004bff8 to < b7859ff398b6b656e1689daa860eb34837b4bb89affected6a4049102055250256623ab1875fabd89004bff8 to < 8e7860543a94784d744c7ce34b78a2e11beefa5caffected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.108 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c1cc3326e27b0bd7a2806b40bc48e49afaf951e7 ↗
- https://git.kernel.org/stable/c/c205565e0f2f439f278a4a94ee97b67ef7b56ae8 ↗
- https://git.kernel.org/stable/c/b7859ff398b6b656e1689daa860eb34837b4bb89 ↗
- https://git.kernel.org/stable/c/8e7860543a94784d744c7ce34b78a2e11beefa5c ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗