In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join the current transaction and i…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are trying to join the current transaction and if it's aborted, we read its 'aborted' field after unlocking fs_info->trans_lock and without holding any extra reference count on it. This means that a concurrent task that is aborting the transaction may free the transaction before we read its 'aborted' field, leading to a use-after-free. Fix this …
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/6ba4663ada6c6315af23a6669d386146634808ec Patch
- https://git.kernel.org/stable/c/7e954b6bb95d67ae4d1a20e9cfd83c182cf929bc Patch
- https://git.kernel.org/stable/c/86d71a026a7f63da905db9add845c8ee88801eca Patch
- https://git.kernel.org/stable/c/8f5cff471039caa2b088060c074c2bf2081bcb01 Patch
- https://git.kernel.org/stable/c/c7a53757717e68af94a56929d57f1e6daff220ec Patch
- https://git.kernel.org/stable/c/ce628048390dad80320d5a1f74de6ca1e1be91e7 Patch
- https://git.kernel.org/stable/c/cee55b1219568c80bf0d5dc55066e4a859baf753 Patch
- https://git.kernel.org/stable/c/e2f0943cf37305dbdeaf9846e3c941451bcdef63 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Timeline
- nvd_ingest NVD