Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-35935

btrfs: send: handle path ref underflow in header iterate_inode_ref()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.312, 5.4.274, 5.10.215, 5.15.155, 6.1.86, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header iterate_inode_ref() Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in be2b6bcc936ae17f42fff6494106a5660b35d8d3; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 024529c27c8b4b273325a169e078337c8279e229; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 4720d590c4cb5d9ffa0060b89743651cc7e995f9; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 9ae356c627b493323e1433dcb27a26917668c07c; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in c1363ed8867b81ea169fba2ccc14af96a85ed183; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 03938619a1e718b6168ae4528e1b0f979293f1a5; From 31db9f7c23fbf7e95026143f79645de6507b583b · fixed in 3c6ee34c6f9cd12802326da26631232a61743501

  • Linux Linux

    3.6

  • KernelLinux

    From 3.6.0 · fixed in 4.19.312; From 4.20.0 · fixed in 5.4.274; From 5.5.0 · fixed in 5.10.215; From 5.11.0 · fixed in 5.15.155; From 5.16.0 · fixed in 6.1.86; From 6.2.0 · fixed in 6.6.27; From 6.7.0 · fixed in 6.8.6

References 8

git.kernel.org