CVE-2025-21679
CVE-2025-21679
Título es
CVE-2025-21679
Vie, 31/01/2025 – 12:15
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-21679
Descripción en
In the Linux kernel, the following vulnerability has been resolved:
btrfs: add the missing error handling inside get_canonical_dev_path
Inside function get_canonical_dev_path(), we call d_path() to get the
final device path.
But d_path() can return error, and in that case the next strscpy() call
will trigger an invalid memory access.
Add back the missing error handling for d_path().
31/01/2025
31/01/2025
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
Pendiente de análisis
Referencias
Enviar en el boletín
Off
