PT-2024-29818 · Linux · Linux Kernel

Syzbot

·

Published

2024-08-17

·

Updated

2024-08-22

·

CVE-2024-42266

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0
Description The Linux kernel has a vulnerability in the btrfs buffered write path, which runs through extent writepage() and has tricky return value handling for writepage delalloc(). When writepage delalloc() returns 1, the function exits, but for other return values, it continues and calls btrfs folio end all writers(). If the folio has been unlocked, this results in an assert panic. The vulnerability can cause IO failures and errors in the btrfs file system.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the vulnerability. Specifically, update to a version later than 6.10.0.
Note: The provided information does not include specific guidance on how to update the kernel or any additional steps required to resolve the issue. It is recommended to follow standard procedures for updating the Linux kernel to ensure a secure and stable system.

Exploit

Fix

Unchecked Return Value

NULL Pointer Dereference

Weakness Enumeration

CWE-252CWE-476

Related Identifiers

BDU:2025-13487
CVE-2024-42266

Affected Products

Linux Kernel