Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Anand Jain

Researcher fromOracle
#45797of 53,632
5.5Total CVSS
Vulnerabilities · 1
PT-2024-8337
5.5
2024-03-04
Linux · Linux Kernel · CVE-2024-35936
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the btrfs component of the Linux kernel and involves an error in handling chunk tree lookup in the `btrfs relocate sys chunks()` function. This error can lead to corruption and potentially allow an attacker to cause a denial of service. The vulnerability is caused by two impossible conditions: the search key being set up to look for a chunk tree item with an offset of -1, and the found key corresponding to a chunk item after a successful search. The offset is decremented by 1 before the next loop, making it impossible to find a chunk item due to alignment and size constraints. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.