Use-After-Free Vulnerability in Linux Kernel’s Btrfs Component
CVE-2024-56759

7.8HIGH

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
6 January 2025

What is CVE-2024-56759?

This vulnerability in the Linux kernel's btrfs component arises during the Copy-On-Write (COW) operation on tree blocks. When tracing is enabled and preemption occurs, there is a risk of triggering a use-after-free condition. Specifically, while processing btrfs_cow_block(), the system may preempt the task before the tracepoint trace_btrfs_cow_block() is called, leading to the release of the extent buffer before it is accessed. This critical flaw has been addressed by relocating the tracepoint invocation to a safer point in the code, ensuring that it does not occur after the extent buffer has been freed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux 3083ee2e18b701122a3b841db83448543a87a583

Linux 3083ee2e18b701122a3b841db83448543a87a583 < 526ff5b27f090fb15040471f892cd2c9899ce314

Linux 3083ee2e18b701122a3b841db83448543a87a583 < 66376f1a73cba57fd0af2631d7888605b738e499

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.