PT-2024-32240 · Linux+6 · Linux Kernel+6
Published
2024-07-11
·
Updated
2026-02-21
·
CVE-2024-46840
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the handling of refs == 0 in snapshot delete in the btrfs file system. In the
reada function, a BUG ON(refs == 0) check could return a transient incorrect answer because it is not holding a lock on the extent leaf. Similarly, in walk down proc, the same check could happen due to extent tree corruption, and it has been changed to return -EUCLEAN. The do walk down() function correctly handles this case but returns -EIO, which is less appropriate than -EUCLEAN. The walk up proc function also had the same BUG ON(refs == 0) check and has been converted to proper error handling. The error message has been adjusted to provide more useful information.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu