PT-2025-3584 · Linux+2 · Linux Kernel+2

Published 2024-12-23 · Updated 2025-05-29 · CVE-2024-57806

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.8

Description The issue is related to a transaction atomicity bug when enabling simple quotas in the Linux kernel. Specifically, when enabling quotas, the BTRFS QGROUP STATUS FLAG SIMPLE MODE flag is set, but the BTRFS FEATURE INCOMPAT SIMPLE QUOTA incompat bit is only set after the transaction is committed. This can lead to an assertion failure if the filesystem is unmounted without starting and committing another transaction, or if there is a power failure. The issue can be reproduced using a specific reproducer script.

Recommendations To resolve the issue, update to a Linux kernel version 6.12.8 or later. As a temporary workaround, consider avoiding the use of simple quotas until a patch is available.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

CWE-99

Related Identifiers

BDU:2026-02667

CVE-2024-57806

USN-7379-1

USN-7379-2

USN-7380-1

USN-7381-1

USN-7382-1

USN-7513-1

USN-7513-2

USN-7513-3

USN-7513-4

USN-7513-5

USN-7514-1

USN-7515-1

USN-7515-2

USN-7522-1

USN-7523-1

USN-7524-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 821

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57806.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57799 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50086 · Vendor Advisory