A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().
References
| Link | Resource |
|---|---|
| https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html | Mailing List Third Party Advisory |
| https://patchwork.kernel.org/project/linux-btrfs/patch/20220721074829.2905233-1-r33s3n6%40gmail.com/ | |
| https://security.netapp.com/advisory/ntap-20230703-0007/ | Third Party Advisory |
| https://www.debian.org/security/2023/dsa-5480 | Third Party Advisory VDB Entry |
| https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html | Mailing List Third Party Advisory |
| https://patchwork.kernel.org/project/linux-btrfs/patch/20220721074829.2905233-1-r33s3n6%40gmail.com/ | |
| https://security.netapp.com/advisory/ntap-20230703-0007/ | Third Party Advisory |
| https://www.debian.org/security/2023/dsa-5480 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
History
21 Nov 2024, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - Mailing List, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - Mailing List, Third Party Advisory | |
| References | () https://patchwork.kernel.org/project/linux-btrfs/patch/20220721074829.2905233-1-r33s3n6%40gmail.com/ - | |
| References | () https://security.netapp.com/advisory/ntap-20230703-0007/ - Third Party Advisory | |
| References | () https://www.debian.org/security/2023/dsa-5480 - Third Party Advisory, VDB Entry |
07 Nov 2023, 04:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
29 Oct 2023, 02:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* |
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* |
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html - Mailing List, Third Party Advisory | |
| First Time |
Debian debian Linux
Netapp h410c Netapp h300s Firmware Netapp h300s Netapp h700s Firmware Netapp h410c Firmware Netapp h410s Netapp h500s Firmware Debian Netapp h410s Firmware Netapp h500s Netapp h700s |
20 Oct 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Oct 2023, 16:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html - Mailing List, Third Party Advisory | |
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20230703-0007/ - Third Party Advisory | |
| References | (DEBIAN) https://www.debian.org/security/2023/dsa-5480 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:netapp:hci_baseboard_management_controller:h500s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h700s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410c:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h300s:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_baseboard_management_controller:h410s:*:*:*:*:*:*:* |
|
| First Time |
Netapp hci Baseboard Management Controller
Netapp |
19 Aug 2023, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Jul 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Jul 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jun 2023, 22:51
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel |
|
| References | (MISC) https://patchwork.kernel.org/project/linux-btrfs/patch/20220721074829.2905233-1-r33s3n6@gmail.com/ - Exploit, Mailing List, Patch | |
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
05 Jun 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-05 21:15
Updated : 2024-11-21 08:16
NVD link : CVE-2023-3111
Mitre link : CVE-2023-3111
CVE.ORG link : CVE-2023-3111
JSON object : View
Products Affected
netapp
- h700s
- h300s
- h300s_firmware
- h410s_firmware
- h410c_firmware
- h500s
- h410c
- h700s_firmware
- h410s
- h500s_firmware
linux
- linux_kernel
debian
- debian_linux
CWE
CWE-416
Use After Free