Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Btrfs file system has been addressed. The issue involved the use of 'BUG_ON()' statements in the 'add_new_free_space()' function, which were intended to handle rare errors related to memory allocation failures. These 'BUG_ON()' statements were unnecessary, as the function could simply return errors to the caller, which is already equipped to handle such situations. The vulnerability has been resolved by modifying 'add_new_free_space()' to return errors instead of using 'BUG_ON()', while also providing the total amount of added free space to an optional pointer argument.
The removal of the 'BUG_ON()' statements prevents the function from abruptly terminating in case of an error, allowing for better error handling and potentially improving the stability of applications that rely on this function.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.