NetSight
IP …
high7.8

CVE-2023-3111

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel.

Impact

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.31 before 4.14.318
from 4.15 before 4.19.286
from 4.20 before 5.4.247
from 5.5 before 5.10.184
from 5.11 before 5.15.63
from 5.16 before 5.19.4
DebianDebian Linux
Versions 10.0, 11.0
NetappH300s Firmware
All versions
NetappH410c Firmware
All versions
NetappH410s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions

Weakness classification

CWE-416

References