CVE-2024-46840

MEDIUM EPSS 17.4%
Published Sep 27, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Sep 27, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUG_ON(refs == 0), which could be unkind since we aren't holding a lock on the extent leaf and thus could get a transient incorrect answer. In walk_down_proc we also BUG_ON(refs == 0), which could happen if we have extent tree corruption. Change that to return -EUCLEAN. In do_walk_down() we catch this case and handle it correctly, however we return -EIO, which -EUCLEAN is a more appropriate error code. Finally in walk_up_proc we have the same BUG_ON(refs == 0), so convert that to proper error handling. Also adjust the error message so we can actually do something with the information.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
17.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel* <4.19.322
linuxlinux_kernel*≥4.20  –  <5.4.284
linuxlinux_kernel*≥5.5  –  <5.10.226
linuxlinux_kernel*≥5.11  –  <5.15.167
linuxlinux_kernel*≥5.16  –  <6.1.110
linuxlinux_kernel*≥6.2  –  <6.6.51
linuxlinux_kernel*≥6.7  –  <6.10.10

References 10

  • git.kernel.org https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d
    Patch