An issue was discovered in the Linux kernel through 4.17.10. There is a use-after-free in trymergefreespace() when mounting a crafted btrfs image, because of a lack of chunk type flag checks in btrfscheckchunkvalid in fs/btrfs/volumes.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14611.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "4.17.10" } ] }, { "events": [ { "introduced": "0" }, { "last_affected": "8.0" } ] } ]