Use-After-Free Vulnerability in Linux Kernel Btrfs File System

CVE-2024-57896

Summary

A vulnerability in the Btrfs file system of the Linux kernel can lead to a use-after-free condition. During the unmount process, the cleaner thread is stopped, freeing its associated task structure. However, a worker from the delalloc_workers queue may still execute operations that reference the now-freed cleaner thread, leading to potential memory corruption. This can result in crashes or unexpected behaviors in systems using affected versions of the Linux kernel. Ensuring timely updates and applying patches is critical to safeguarding systems against this vulnerability.

References