UBUNTU-CVE-2021-47599: Medium severity ubuntu/linux vulnerability

Q: What conditions are needed to trigger this issue?

The issue occurs when btrfs_prepare_sprout() moves devices from fs_devices::devices into fs_devices::seed_list while btrfs_show_devname() concurrently searches the device list. Reading mount information through /proc/self/mounts can reach the affected btrfs_show_devname() path.

Q: What is the expected impact if the issue is triggered?

The reported behavior is a kernel warning caused when btrfs_show_devname() cannot find a device after it has been moved from the device list. The supplied severity vector rates availability impact as high, with no confidentiality or integrity impact.

Q: Which Ubuntu kernel packages are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-fips, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

Published Jun 19, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved: btrfs: use latestdev in btrfsshowdevname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfsshowdevname+0x104/0x1e8 [btrfs] CPU: 2 PID: 1 Comm: systemd Tainted: G W O 5.14.0-rc1-custom #72 Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 Call trace: btrfsshowdevname+0x108/0x1b4 [btrfs] showmountinfo+0x234/0x2c4 mshow+0x28/0x34 seqreaditer+0x12c/0x3c4 vfsread+0x29c/0x2c8 ksysread+0x80/0xec arm64sysread+0x28/0x34 invokesyscall+0x50/0xf8 doel0svc+0x88/0x138 el0svc+0x2c/0x8c el0t64synchandler+0x84/0xe4 el0t64sync+0x198/0x19c Reason: While btrfspreparesprout() moves the fsdevices::devices into fsdevices::seedlist, the btrfsshowdevname() searches for the devices and found none, leading to the warning as in above. Fix: latestdev is updated according to the changes to the device list. That means we could use the latestdev->name to show the device name in /proc/self/mounts, the pointer will be always valid as it's assigned before the device is deleted from the list in remove or replace. The RCU protection is sufficient as the device structure is freed after synchronization.

Affected Software

134 affected componentsFixes available

ubuntu/linux*

ubuntu/linux-aws<4.4.0-1152.158

4.4.0-1152.158

ubuntu/linux-azure<4.15.0-1197.212~14.04.1

4.15.0-1197.212~14.04.1

ubuntu/linux-lts-xenial<4.4.0-278.312~14.04.1

4.4.0-278.312~14.04.1

ubuntu/linux<4.4.0-278.312

4.4.0-278.312

ubuntu/linux-aws<4.4.0-1190.205

4.4.0-1190.205

ubuntu/linux-aws-hwe<4.15.0-1189.202~16.04.1

4.15.0-1189.202~16.04.1

ubuntu/linux-azure<4.15.0-1197.212~16.04.1

4.15.0-1197.212~16.04.1

ubuntu/linux-gcp<4.15.0-1182.199~16.04.1

4.15.0-1182.199~16.04.1

ubuntu/linux-hwe<4.15.0-247.259~16.04.1

4.15.0-247.259~16.04.1

ubuntu/linux-kvm<4.4.0-1153.164

4.4.0-1153.164

ubuntu/linux-oracle<4.15.0-1151.162~16.04.1

4.15.0-1151.162~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1122.129

4.4.0-1122.129

ubuntu/linux-fips*

ubuntu/linux<4.15.0-247.259

4.15.0-247.259

ubuntu/linux-aws<4.15.0-1189.202

4.15.0-1189.202

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1156.166~18.04.1

5.4.0-1156.166~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1197.212

4.15.0-1197.212

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1161.167~18.04.1

5.4.0-1161.167~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1182.199

4.15.0-1182.199

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1159.168~18.04.1

5.4.0-1159.168~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-227.247~18.04.1

5.4.0-227.247~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1102.107~18.04.1

5.4.0-1102.107~18.04.1

ubuntu/linux-kvm<4.15.0-1171.176

4.15.0-1171.176

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1151.162

4.15.0-1151.162

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1154.164~18.04.1

5.4.0-1154.164~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1139.152~18.04.1

5.4.0-1139.152~18.04.1

ubuntu/linux-aws-fips<4.15.0-2127.133

4.15.0-2127.133

ubuntu/linux-azure-fips<4.15.0-2106.112

4.15.0-2106.112

ubuntu/linux-fips<4.15.0-1144.156

4.15.0-1144.156

ubuntu/linux-gcp-fips<4.15.0-2090.96

4.15.0-2090.96

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-227.247

5.4.0-227.247

ubuntu/linux-aws<5.4.0-1156.166

5.4.0-1156.166

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure<5.4.0-1160.166

5.4.0-1160.166

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield<5.4.0-1116.123

5.4.0-1116.123

ubuntu/linux-gcp<5.4.0-1159.168

5.4.0-1159.168

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm<5.4.0-1102.107

5.4.0-1102.107

ubuntu/linux-intel-5.13*

ubuntu/linux-iot<5.4.0-1060.63

5.4.0-1060.63

ubuntu/linux-kvm<5.4.0-1143.152

5.4.0-1143.152

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle<5.4.0-1154.164

5.4.0-1154.164

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi<5.4.0-1139.152

5.4.0-1139.152

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp<5.4.0-1074.78

5.4.0-1074.78

ubuntu/linux-aws-fips<5.4.0-1155.165+fips1

5.4.0-1155.165+fips1

ubuntu/linux-azure-fips<5.4.0-1160.166+fips1

5.4.0-1160.166+fips1

ubuntu/linux-fips<5.4.0-1130.140

5.4.0-1130.140

ubuntu/linux-gcp-fips<5.4.0-1159.168+fips1

5.4.0-1159.168+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle-6.5*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1152.158
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1197.212~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-278.312~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-278.312
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1190.205
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1189.202~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1197.212~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1182.199~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-247.259~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1153.164
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1151.162~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1122.129
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-247.259
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1189.202
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.166~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1197.212
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1161.167~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1182.199
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1159.168~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-227.247~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.107~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1171.176
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1151.162
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1154.164~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.152~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2127.133
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2106.112
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1144.156
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2090.96
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-227.247
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.166
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1160.166
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.123
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1159.168
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1102.107
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1060.63
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1143.152
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1154.164
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1139.152
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1074.78
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1155.165+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1160.166+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1130.140
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1159.168+fips1

Event History

Jun 19, 2024

CVE Published

via OSV·03:15 PM

Data Sourced

via OSV·03:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are needed to trigger this issue?

The issue occurs when btrfs_prepare_sprout() moves devices from fs_devices::devices into fs_devices::seed_list while btrfs_show_devname() concurrently searches the device list. Reading mount information through /proc/self/mounts can reach the affected btrfs_show_devname() path.

What is the expected impact if the issue is triggered?

The reported behavior is a kernel warning caused when btrfs_show_devname() cannot find a device after it has been moved from the device list. The supplied severity vector rates availability impact as high, with no confidentiality or integrity impact.

Which Ubuntu kernel packages are listed as affected?

The listed software includes ubuntu/linux, ubuntu/linux-fips, ubuntu/linux-aws, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-aws-fips, ubuntu/linux-azure-fips, and ubuntu/linux-gcp-fips.

UBUNTU-CVE-2021-47599: Medium severity ubuntu/linux vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What conditions are needed to trigger this issue?

What is the expected impact if the issue is triggered?

Which Ubuntu kernel packages are listed as affected?

Company

Resources

Contact

Frequently Asked Questions

What conditions are needed to trigger this issue?

What is the expected impact if the issue is triggered?

Which Ubuntu kernel packages are listed as affected?