Skip to content
OpenAdvisories

Description

__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel through 5.3.12 calls btrfs_print_leaf in a certain ENOENT case, which allows local users to obtain potentially sensitive information about register values via the dmesg program. NOTE: The BTRFS development team disputes this issues as not being a vulnerability because “1) The kernel provide facilities to restrict access to dmesg - dmesg_restrict=1 sysctl option. So it's really up to the system administrator to judge whether dmesg access shall be disallowed or not. 2) WARN/WARN_ON are widely used macros in the linux kernel. If this CVE is considered valid this would mean there are literally thousands CVE lurking in the kernel - something which clearly is not the case.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 linux 5.6.7-1 —
Debian 13 linux 5.6.7-1 —
Debian 12 linux 5.6.7-1 —
Debian 9 linux-4.19 4.19.160-2~deb9u1 DLA-2483-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux 5.4.0-31.35 —
Ubuntu 20.04 LTS linux-aws +4 5.4.0-1011.11 —
Ubuntu 20.04 LTS linux-azure 5.4.0-1012.12 —
Ubuntu 20.04 LTS linux-gke +2 No fix yet —
Ubuntu 20.04 LTS linux-oem-5.6 5.6.0-1010.10 —
Ubuntu 20.04 LTS linux-riscv 5.4.0-26.30 —
Ubuntu 18.04 LTS linux 4.15.0-109.110 USN-4414-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1077.81 USN-4414-1
Ubuntu 18.04 LTS linux-aws-5.3 5.3.0-1019.21~18.04.1 —
Ubuntu 18.04 LTS linux-azure-5.3 5.3.0-1022.23~18.04.1 —
Ubuntu 18.04 LTS linux-gcp +6 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1080.90 USN-4414-1
Ubuntu 18.04 LTS linux-gcp-5.3 +1 5.3.0-1020.22~18.04.1 —
Ubuntu 18.04 LTS linux-gke-4.15 4.15.0-1066.69 USN-4414-1
Ubuntu 18.04 LTS linux-hwe 5.3.0-53.47~18.04.1 —
Ubuntu 18.04 LTS linux-kvm 4.15.0-1069.70 USN-4414-1
Ubuntu 18.04 LTS linux-oem +1 4.15.0-1091.101 USN-4414-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1048.52 USN-4414-1
Ubuntu 18.04 LTS linux-oracle-5.3 5.3.0-1018.20~18.04.1 —
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1065.69 USN-4414-1
Ubuntu 18.04 LTS linux-raspi2-5.3 5.3.0-1026.28~18.04.1 —
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1083.91 USN-4414-1
Ubuntu 16.04 LTS linux-aws-hwe 4.15.0-1079.83~16.04.1 USN-4414-1
Ubuntu 16.04 LTS linux-azure 4.15.0-1091.101~16.04.1 USN-4414-1
Ubuntu 16.04 LTS linux-gcp 4.15.0-1080.90~16.04.1 USN-4414-1
Ubuntu 16.04 LTS linux-hwe 4.15.0-112.113~16.04.1 USN-4414-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu 16.04 LTS linux-oracle 4.15.0-1050.54~16.04.1 USN-4414-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 18.04 LTS linux-aws-fips +2 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2022.22 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2006.7 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1037.42 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips No fix yet —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 16.04 LTS linux +2 No fix yet —
Ubuntu Pro 14.04 LTS linux +2 No fix yet —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1091.101~14.04.1 USN-4414-1

Advisories 3

References