PT-2024-26853 · Linux+3 · Linux Kernel+3
Naohiro Aota
·
Published
2024-04-09
·
Updated
2024-07-26
·
CVE-2024-36027
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises from the mechanism introduced to prevent a write hole of an extent buffer in the Btrfs file system. When
btrfs clear buffer dirty() marks an extent buffer as EXTENT BUFFER ZONED ZEROOUT and skips the entry function, it can lead to two problems if this call happens while the buffer is under IO (with the WRITEBACK flag set, without the DIRTY flag). Firstly, it can result in adding a faulty delayed reference item, leading to a file system corrupted (EUCLEAN) error. Secondly, it can write out a cleared tree node on disk. However, the chance of hitting the corruption is relatively small because the corrupted node will be invalidated in the next transaction commit anyway.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Ubuntu