Threats tagged 'ghsa-8vvp-6p8q-q9pq'

A vulnerability in the Linux kernel's Btrfs filesystem tree-checker has been resolved. The issue involves improper validation of names in ROOT_REF and ROOT_BACKREF items, which can lead to out-of-bounds memory access when corrupted items are processed. This can cause excessive data copying into fixed-size buffers during the BTRFS_IOC_GET_SUBVOL_INFO ioctl call. The fix involves validating these items before use and restricting copy lengths to validated name lengths.