PT-2022-6660 · Linux+5 · Linux Kernel+5

Published 2022-08-17 · Updated 2025-07-28 · CVE-2023-3111

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A use after free vulnerability was found in the prepare to relocate function in fs/btrfs/relocation.c in the btrfs module of the Linux Kernel. This flaw can be triggered by calling btrfs ioctl balance() before calling btrfs ioctl defrag(). The exploitation of this vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-2915

ALT-PU-2022-2919

ALT-PU-2022-2922

ALT-PU-2022-2925

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

ALT-PU-2023-8461

AZL-27087

BDU:2023-03163

CVE-2023-3111

DLA-3508-1

DLA-3623-1

DSA-5480-1

OPENSUSE-SU-2023_2871-1

OPENSUSE-SU-2023_2892-1

OPENSUSE-SU-2023_3302-1

OPENSUSE-SU-2023_4348-1

SUSE-SU-2023:2803-1

SUSE-SU-2023:2804-1

SUSE-SU-2023:2808-1

SUSE-SU-2023:2820-1

SUSE-SU-2023:2822-1

SUSE-SU-2023:2830-1

SUSE-SU-2023:2831-1

SUSE-SU-2023:2871-1

SUSE-SU-2023:2892-1

SUSE-SU-2023:3302-1

SUSE-SU-2023:4348-1

SUSE-SU-2023:4358-1

SUSE-SU-2023:4377-1

SUSE-SU-2024:0112-1

SUSE-SU-2025:02264-1

SUSE-SU-2025:02308-1

SUSE-SU-2025:02312-1

SUSE-SU-2025:02320-1

SUSE-SU-2025:02321-1

SUSE-SU-2025:02322-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:02537-1

SUSE-SU-2025:2264-1

SUSE-SU-2025_02264-1

SUSE-SU-2025_02308-1

SUSE-SU-2025_02312-1

SUSE-SU-2025_02334-1

SUSE-SU-2025_02537-1

USN-6221-1

USN-6252-1

USN-6284-1

USN-6301-1

USN-6312-1

USN-6314-1

USN-6331-1

USN-6337-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Linuxmint

Suse

Ubuntu

References · 1528

• 🔥 https://patchwork.kernel.org/project/linux-btrfs/patch/[e-mail] · Exploit
• https://ubuntu.com/security/notices/USN-6312-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2194 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3508-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-20593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29901 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6337-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6337-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3111 · Security Note
• https://ubuntu.com/security/CVE-2021-20321 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6331-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3111 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5480-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02537-1 · Vendor Advisory