Description: Invalid pointer dereference in io_ctl_map_page() when mounting and operating a crafted btrfs image References: https://bugzilla.kernel.org/show_bug.cgi?id=199849 https://patchwork.kernel.org/patch/10503147/ Notes: Bugs: upstream: released (4.19-rc1) [fce466eab7ac6baa9d2dcd88abcf945be3d4a089] 4.19-upstream-stable: N/A "Fixed before branch point" 4.9-upstream-stable: released (4.9.144) [058e388e42c8dc5b6ce6248990c75a0459e20197] 3.16-upstream-stable: released (3.16.83) [df8ecef7a35de12986676edc45fd841e6d788ba8] sid: released (4.19.9-1) 4.19-buster-security: N/A "Fixed before branching point" 4.9-stretch-security: released (4.9.144-1) 3.16-jessie-security: released (3.16.84-1)