PT-2024-21572 · Linux · Linux Kernel

Published 2024-04-17 · Updated 2024-07-29 · CVE-2024-26905

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race issue has been identified in the Linux kernel, specifically in the btrfs module. The issue occurs when accessing the reserved amount of block reserves without taking the block reserve's spinlock first. This can lead to a data race, as reported by KCSAN. The issue is related to the btrfs block rsv release function and can cause more reclaim work to be done sooner rather than later.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-26905

Affected Products

Linux Kernel

References · 10

• https://ubuntu.com/security/CVE-2024-26905 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26905 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26905 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-26905 · Security Note
• https://git.kernel.org/linus/e06cc89475eddc1f3a7a4d471524256152c68166 · Note
• https://git.kernel.org/stable/c/c44542093525699a30c307dae1ea5a1b03b3302f · Note
• https://twitter.com/CVEnew/status/1780651944115138858 · Twitter Post
• https://git.kernel.org/stable/c/995e91c9556c8fc6028b474145a36e947d1eb6b6 · Note
• https://git.kernel.org/stable/c/e06cc89475eddc1f3a7a4d471524256152c68166 · Note
• https://git.kernel.org/stable/c/82220b1835baaebf4ae2e490f56353a341a09bd2 · Note