NetSight
IP …
high7.0

CVE-2023-4389

A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count.

Impact

A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double decrement of the reference count. This issue may allow a local attacker with user privilege to crash the system or may lead to leaked internal kernel information.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.7 before 5.10.112
from 5.11 before 5.15.35
from 5.16 before 5.17.4

Weakness classification

CWE-415

References