Linux Kernel Btrfs Invalid Memory Access Vulnerability During Log Replay

A vulnerability in the Linux kernel's Btrfs file system has been addressed, which involved an invalid memory access during log replay. The issue arose in the __inode_add_ref() function while processing extended references (extrefs). If the function jumped to a certain label without properly initializing the length of the victim name, it led to undefined behavior. This, in turn, caused an invalid memory access in the subsequent iteration of the loop. The vulnerability has been fixed by ensuring that the victim name length is correctly initialized with the length of the current extref's name before the function jumps to the next label.

Impact

Exploitation of this vulnerability could lead to undefined behavior in the kernel, potentially causing a memory corruption issue.