CVE-2022-50300

btrfs: fix extent map use-after-free when handling missing device in read_one_chunk

References

Notes

 carnil> Introduced in adfb69af7d8c ("btrfs: add_missing_dev() should return the actual
 carnil> error"). Vulnerable versions: 4.15.

Bugs

Status

Branch Status
upstream released (6.2-rc1) [1742e1c90c3da344f3bb9b1f1309b3f47482756a]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.6-upstream-stable N/A "Fixed before branching point"
6.1-upstream-stable released (6.1.4) [169a4cf46882974d4db6d85eb623ec898e51bbc0]
5.10-upstream-stable needed
sid released (6.1.4-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security N/A "Fixed before branching point"
5.10-bullseye-security needed