جزئیات آسیبپذیری
CVE-2026-46129
btrfs: fix double free in create_space_info() error path
شرح رسمی (انگلیسی)
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free in create_space_info() error path When kobject_init_and_add() fails, the call chain is: create_space_info() -> btrfs_sysfs_add_space_info_type() -> kobject_init_and_add() -> failure -> kobject_put(&space_info->kobj) -> space_info_release() -> kfree(space_info) Then control returns to create_space_info(): btrfs_sysfs_add_space_info_type() returns error -> goto out_free -> kfree(space_info) This causes a double free. Keep the direct kfree(space_info) for the earlier failure path, but after btrfs_sysfs_add_space_info_type() has called kobject_put(), let the kobject release callback handle the cleanup.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Linux | Linux | 6.19 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 20e8f2de3688082eeafeb93c8900485b7542457e ≤ v < ae6d6e31ceb72b7697c28a528e4923c08e3c2ef5 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 58208907c4044a764dbd8896026283905da6d9be ≤ v < c2670ec4aa49ca226bce9776601e0da37502be07 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.1.162 ≤ v < 6.1.175 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.12.67 ≤ v < 6.12.88 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.18.7 ≤ v < 6.18.30 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6.6.122 ≤ v < 6.6.140 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6cb008f1bb23e023dfe615cca5df14570dfc8da5 ≤ v < 9a060970fd7b5e1c561e4ce73cb9949e4269a738 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | a11224a016d6d1d46a4d9b6573244448a80d4d7f ≤ v < dd6ade0fdd59218d71a981ae7c937a304e49209c | CVEProject cvelistV5 (CNA) |
| Linux | Linux | a11224a016d6d1d46a4d9b6573244448a80d4d7f ≤ v < 3f487be81292702a59ea9dbc4088b3360a50e837 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | bb4fa4c0b54aae25e55faeda7f78d0c11b8cd618 ≤ v < f414b3abbba59ef379a2b3c31f2bdd9358ed5e53 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۶- https://git.kernel.org/stable/c/ae6d6e31ceb72b7697c28a528e4923c08e3c2ef5
- https://git.kernel.org/stable/c/c2670ec4aa49ca226bce9776601e0da37502be07
- https://git.kernel.org/stable/c/f414b3abbba59ef379a2b3c31f2bdd9358ed5e53
- https://git.kernel.org/stable/c/9a060970fd7b5e1c561e4ce73cb9949e4269a738
- https://git.kernel.org/stable/c/dd6ade0fdd59218d71a981ae7c937a304e49209c
- https://git.kernel.org/stable/c/3f487be81292702a59ea9dbc4088b3360a50e837
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۳/۰۷
- آخرین بهروزرسانی
- ۱۴۰۵/۰۵/۱۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Linux
پیشبینی بهرهبرداری (EPSS)
ضعفها (CWE)
- —