Assertion Failure in Linux Kernel Affects Subvolume Creation
CVE-2024-23850

5.5MEDIUM

Key Information:

Vendor

Linux
Status
Linux Kernel
Vendor
CVE Published:
23 January 2024

What is CVE-2024-23850?

A vulnerability in the Linux kernel's btrfs file system can lead to an assertion failure during disk operations. Specifically, when a subvolume is created, it may be read before its root item is fully established. This premature access can result in a system crash, posing risks to data integrity and availability. The issue affects all Linux kernel versions through 6.7.1, highlighting the need for timely updates and patches to mitigate the potential consequences.

References

https://lore.kernel.org/lkml/CALGdzuo6awWdau3X=8XK547x2vX...
https://lore.kernel.org/all/6a80cb4b32af89787dadee728310e...
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.