Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: use latest_dev in btrfs_show_devname
The test case btrfs/238 reports the warning below:
WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs]
CPU: 2 PID: 1 Comm: systemd Tainted: G W O 5.14.0-rc1-custom #72
Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015
Call trace:
btrfs_show_devname+0x108/0x1b4 [btrfs]
show_mountinfo+0x234/0x2c4
m_show+0x28/0x34
seq_read_iter+0x12c/0x3c4
vfs_read+0x29c/0x2c8
ksys_read+0x80/0xec
__arm64_sys_read+0x28/0x34
invoke_syscall+0x50/0xf8
do_el0_svc+0x88/0x138
el0_svc+0x2c/0x8c
el0t_64_sync_handler+0x84/0xe4
el0t_64_sync+0x198/0x19c
Reason:
While btrfs_prepare_sprout() moves the fs_devices::devices into
fs_devices::seed_list, the btrfs_show_devname() searches for the devices
and found none, leading to the warning as in above.
Fix:
latest_dev is updated according to the changes to the device list.
That means we could use the latest_dev->name to show the device name in
/proc/self/mounts, the pointer will be always valid as it's assigned
before the device is deleted from the list in remove or replace.
The RCU protection is sufficient as the device structure is freed after
synchronization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 4.19.141 – < 4.20, 5.4.60 – < 5.5, 5.7.17 – < 5.8, 5.8.3 – < 5.9, 5.9 | 4.20 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.15.15-1 | — |
| Debian 13 | linux | 5.15.15-1 | — |
| Debian 12 | linux | 5.15.15-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux-raspi-realtime | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv +33 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1155.165+fips1 | USN-8107-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1160.166+fips1 | USN-8098-8 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1130.140 | USN-8098-6 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1159.168+fips1 | USN-8098-6 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | 4.15.0-2127.133 | USN-8112-2 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | 4.15.0-2106.112 | USN-8112-4 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | 4.15.0-1144.156 | USN-8112-2 |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | 4.15.0-2090.96 | USN-8112-2 |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | 4.4.0-1122.129 | USN-8070-3 |
| Ubuntu Pro 20.04 LTS | linux | 5.4.0-227.247 | USN-8098-1 |
| Ubuntu Pro 20.04 LTS | linux-aws | 5.4.0-1156.166 | USN-8098-3 |
| Ubuntu Pro 20.04 LTS | linux-azure | 5.4.0-1160.166 | USN-8098-7 |
| Ubuntu Pro 20.04 LTS | linux-bluefield | 5.4.0-1116.123 | USN-8224-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp | 5.4.0-1159.168 | USN-8098-2 |
| Ubuntu Pro 20.04 LTS | linux-ibm | 5.4.0-1102.107 | USN-8098-4 |
| Ubuntu Pro 20.04 LTS | linux-iot | 5.4.0-1060.63 | USN-8098-5 |
| Ubuntu Pro 20.04 LTS | linux-kvm | 5.4.0-1143.152 | USN-8098-5 |
| Ubuntu Pro 20.04 LTS | linux-oracle | 5.4.0-1154.164 | USN-8098-3 |
| Ubuntu Pro 20.04 LTS | linux-raspi | 5.4.0-1139.152 | USN-8098-10 |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1074.78 | USN-8098-3 |
| Ubuntu Pro 18.04 LTS | linux | 4.15.0-247.259 | USN-8112-1 |
| Ubuntu Pro 18.04 LTS | linux-aws | 4.15.0-1189.202 | USN-8112-1 |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1156.166~18.04.1 | USN-8098-3 |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | 4.15.0-1197.212 | USN-8112-3 |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1161.167~18.04.1 | USN-8201-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | 4.15.0-1182.199 | USN-8112-1 |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1159.168~18.04.1 | USN-8098-3 |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-227.247~18.04.1 | USN-8098-4 |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1102.107~18.04.1 | USN-8098-9 |
| Ubuntu Pro 18.04 LTS | linux-kvm | 4.15.0-1171.176 | USN-8112-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle | 4.15.0-1151.162 | USN-8112-1 |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1154.164~18.04.1 | USN-8098-3 |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1139.152~18.04.1 | USN-8098-10 |
| Ubuntu Pro 16.04 LTS | linux | 4.4.0-278.312 | USN-8070-1 |
| Ubuntu Pro 16.04 LTS | linux-aws | 4.4.0-1190.205 | USN-8070-1 |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | 4.15.0-1189.202~16.04.1 | USN-8112-1 |
| Ubuntu Pro 16.04 LTS | linux-azure | 4.15.0-1197.212~16.04.1 | USN-8112-3 |
| Ubuntu Pro 16.04 LTS | linux-gcp | 4.15.0-1182.199~16.04.1 | USN-8112-1 |
| Ubuntu Pro 16.04 LTS | linux-hwe | 4.15.0-247.259~16.04.1 | USN-8112-1 |
| Ubuntu Pro 16.04 LTS | linux-kvm | 4.4.0-1153.164 | USN-8070-1 |
| Ubuntu Pro 16.04 LTS | linux-oracle | 4.15.0-1151.162~16.04.1 | USN-8112-1 |
| Ubuntu Pro 14.04 LTS | linux | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux-aws | 4.4.0-1152.158 | USN-8070-2 |
| Ubuntu Pro 14.04 LTS | linux-azure | 4.15.0-1197.212~14.04.1 | USN-8112-5 |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | 4.4.0-278.312~14.04.1 | USN-8070-2 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.63.1 | SUSE-SU-2024:2947-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| SLES 15 SP5 | kernel-docs | 5.14.21-150500.55.73.2 | SUSE-SU-2024:2939-1 |
| SLES 12 SP5 | kernel-azure +2 | 4.12.14-16.194.1 | SUSE-SU-2024:2901-1 |
| SLES 12 SP5 | kernel-docs | 4.12.14-122.225.2 | SUSE-SU-2024:2940-1 |
| SLES 12 SP5 | kernel-syms +3 | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP5 | kernel-azure +2 | 4.12.14-16.194.1 | SUSE-SU-2024:2901-1 |
| SLES for SAP 12 SP5 | kernel-syms +2 | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
| SLE Real Time 12 SP5 | kernel-rt +3 | 4.12.14-10.197.1 | SUSE-SU-2024:2892-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_17 +1 | 1-150500.11.3.1 | SUSE-SU-2024:2939-1, SUSE-SU-2024:2894-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.225.1 | SUSE-SU-2024:2940-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_59 | 1-8.3.1 | SUSE-SU-2024:2940-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +3 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +9 | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.63.1 | SUSE-SU-2024:2947-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-docs | 5.14.21-150500.55.73.2 | SUSE-SU-2024:2939-1 |
| openSUSE Leap 15.5 | kernel-rt +3 | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | kernel-default | 5.14.21-150500.55.73.1 | SUSE-SU-2024:2939-1 |
| openSUSE Leap Micro 5.5 | kernel-default-base | 5.14.21-150500.55.73.1.150500.6.33.8 | SUSE-SU-2024:2939-1 |
| openSUSE Leap Micro 5.5 | kernel-rt | 5.14.21-150500.13.64.1 | SUSE-SU-2024:2894-1 |
Advisories 28
- USN-8224-1 linux-bluefield vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8201-1 linux-azure-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8098-10 linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 4, 2026
- USN-8112-1 linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8112-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8112-5 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-8 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-9 linux-ibm-5.4 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8107-1 linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8112-3 linux-azure, linux-azure-4.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8112-4 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-3 linux-aws, linux-aws-5.4, linux-gcp-5.4, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-6 linux-fips, linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-7 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-4 linux-hwe-5.4, linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-1 linux vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-2 linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8070-1 linux, linux-aws, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8098-5 linux-iot, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8070-2 linux-aws, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- USN-8070-3 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
- WID-SEC-2024-1418 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Sep 8, 2026
- SUSE-SU-2024:2892-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2940-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2947-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2939-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2901-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:2894-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · May 2, 2025