[4.19] Bugfix for CVE-2023-3111 · Pull Request !2040 · anolis/cloud-kernel

bugzilla: https://bugzilla.openanolis.cn/show_bug.cgi?id=5933

Description:
A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

Broken commit info:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0

Bugfix commit info:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=b60e862e133f646f19023ece1d476d630a660de1
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ff0e8ed8dfb584575cffc1561f17a1d094e8565b
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=8e546674031fc1576da501e27a8fd165222e5a37
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=dcb11fe0a0a9cca2b7425191b9bf30dc29f2ad0f
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=78f8c2370e3d33e35f23bdc648653d779aeacb6e

类型	指派人员	状态
审查		已完成 (1/0)
测试		已完成 (2/1)

GVPanolis/cloud-kernel

搜索帮助

GVP anolis/cloud-kernel