Description (CNA)
A use-after-free flaw was found in btrfs_get_dev_args_from_path in fs/btrfs/volumes.c in btrfs file-system in the Linux Kernel. This flaw allows a local attacker with special privileges to cause a system crash or leak internal kernel information
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Kernel | unaffected 6.0-rc3 |
| Red Hat / Red Hat Enterprise Linux 6 | unaffected |
| Red Hat / Red Hat Enterprise Linux 7 | unaffected |
| Red Hat / Red Hat Enterprise Linux 7 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Fedora / Fedora | unaffected |
CWE
CWE-400
References
- https://access.redhat.com/security/cve/CVE-2023-4394
- https://bugzilla.redhat.com/show_bug.cgi?id=2219263
- https://patchwork.kernel.org/project/linux-btrfs/patch/20220815151606.3479183-1-r33s3n6@gmail.com/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.