{"btrfs vulnerability","user-after-free fix","version 5.16"}

CVE-2024-50217

What is CVE-2024-50217?

A use-after-free vulnerability has been identified in the Linux kernel's Btrfs file system. This issue arises when two images with the same fsid but different dev_uuids are mounted concurrently. Specifically, the problem occurs during the processing of block device files, where certain operations can lead to accessing a freed variable, jeopardizing system stability. The bug is triggered when btrfs devices are scanned and mounted in a specific sequence, potentially allowing attackers to exploit the flaw to cause unpredictable behavior. The vulnerability has been addressed by ensuring that the 'device->bdev_file' is reset to NULL after the closure of btrfs devices, preventing unauthorized memory access.

References