CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in...
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- Updated
- 2026-11-02
EUVDEUVD-2018-6611 No score
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
EUVD-2018-6611- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gvph-5529-3vhw
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in...
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
GHSA-gvph-5529-3vhw- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
DEBIAN-CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-14722
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
- Record
UBUNTU-CVE-2018-14722- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10662-1 No score
btrfsmaintenance-0.5-2.5 on GA media
These are all security issues fixed in the btrfsmaintenance-0.5-2.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10662-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
btrfsmaintenanceDebian:12 |
before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceDebian:13 |
before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceDebian:14 |
before 0.4.1-2 | 0.4.1-2 |
btrfsmaintenanceUbuntu:20.04:LTS |
All versions, plus listed versions 0.4.2-1 |
None known |
btrfsmaintenanceUbuntu:22.04:LTS |
All versions, plus listed versions 0.5-1 |
None known |
btrfsmaintenanceUbuntu:24.04:LTS |
All versions, plus listed versions 0.5-5 |
None known |
btrfsmaintenanceUbuntu:25.10 |
All versions, plus listed versions 0.5.2-1 |
None known |
btrfsmaintenanceUbuntu:26.10 |
All versions, plus listed versions 0.5.2-1build1 |
None known |
btrfsmaintenanceUbuntu:26.04:LTS |
All versions, plus listed versions 0.5.2-10.5.2-1build1 |
None known |
btrfsmaintenanceopenSUSE:Tumbleweed |
before 0.5-2.5 | 0.5-2.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-14722 is a high vulnerability (CVSS 8.1) in Btrfsmaintenance Project Btrfsmaintenance, published August 15, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.99%, the 87th percentile. Fixed in btrfsmaintenance 0.4.1-2.