btrfs: abort transaction on failure to update inode for hole punching and reflinking
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.158, 6.12.112, 6.18.54, 7.2.8
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failure the transaction is committed, as we have dropped file extent items from a range and either punched a hole or insert a new file extent item for that range (for reflinks). So add the missing transaction abort.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 2aaa66558172b017f36bf38ae69372813dedee9d · fixed in 2605eb9ba3bbd4c9f455cfe6b85bd28a1da7067d; From 2aaa66558172b017f36bf38ae69372813dedee9d · fixed in 834a3b5c5f1ec0df48c1a6208f9989f4ffdaa0b6; From 2aaa66558172b017f36bf38ae69372813dedee9d · fixed in 9588850bfa75c78ce73c2f6f72544d19d2e9beb6; From 2aaa66558172b017f36bf38ae69372813dedee9d · fixed in 36c68dc909845c049e0286d229bc502947239452; From 2aaa66558172b017f36bf38ae69372813dedee9d · fixed in 97fcd34aa9fd73cefe3120ac9a82ca9d7763922f
- Linux Linux
3.7
- KernelLinux
From 3.7.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.54; From 6.19.0 · fixed in 7.2.8