Btrfsmaintenance · Btrfsmaintenance · CVE-2018-14722
**Name of the Vulnerable Software and Affected Versions**
btrfsmaintenance versions through 0.4.1
**Description**
An issue in the evaluate auto mountpoint function in btrfsmaintenance-functions allows code execution as root via a specially crafted filesystem label. This can occur when btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance, which is not the default configuration.
**Recommendations**
For versions through 0.4.1, consider disabling the auto setting for btrfs-{scrub,balance,trim} in /etc/sysconfig/btrfsmaintenance to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.