PT-2024-11429
CVE-2021-47433
·
Published
2021-10-05
·
Updated
2024-06-25
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue occurs due to incorrect abort logic in the
btrfs replace file extents function. Error injection testing revealed a case where a corrupt file system with a missing extent in the middle of a file could occur. The problem arises because the if statement to decide if an abort is necessary is incorrect. The only situation where an abort would happen is if a specific error code (-EOPNOTSUPP) is not returned and the call comes from the file clone code. However, the prealloc code also uses this path, and instead, an abort should occur if there is an error, except for the -EOPNOTSUPP error when coming from the clone file code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾