PT-2024-31339 · Linux+5 · Linux Kernel+5

Published 2024-06-03 · Updated 2026-05-26 · CVE-2024-44972

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the btrfs filesystem. The issue occurs when using subpage and zoned cases, which can lead to a data leak at unmount time. The vulnerability can be triggered by a specific workload, including commands such as mkfs.btrfs, mount, fsstress, and umount. The dmesg includes warnings related to rsv leak detection and btrfs destroy inode. The vulnerability is caused by not clearing the page dirty flag inside the extent write locked range function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Memory Leak

Weakness Enumeration

CWE-772

CWE-401

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13979

ALT-PU-2024-14046

BDU:2025-03539

CVE-2024-44972

ECHO-AD0E-517C-B858

MGASA-2024-0309

MGASA-2024-0310

OESA-2025-1097

OPENSUSE-SU-2024_3592-1

SUSE-SU-2024:3553-1

SUSE-SU-2024:3566-1

SUSE-SU-2024:3569-1

SUSE-SU-2024:3592-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1278

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44972.json · Exploit
• https://ubuntu.com/security/CVE-2024-41064 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41036 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7154-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53091 · Security Note
• https://ubuntu.com/security/CVE-2024-42114 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42110 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53223 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-40965 · Security Note
• https://ubuntu.com/security/CVE-2024-46761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45007 · Security Note
• https://ubuntu.com/security/CVE-2024-47664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-44975 · Vendor Advisory