CVE-2024-23850

Updated: 2024-11-30 04:28:29.385043

Description:

In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2024-02-01 03:49:32
AlmaLinux 9.2 FIPS kernel 5.14.0 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Not Vulnerable 2024-06-29 14:24:01
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-02-01 03:49:32
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-07-22 12:05:49
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-02-01 03:49:32
Total: 14