CVE-2024-26792

Summary

CVE-2024-26792 is a vulnerability affecting the Linux kernel's btrfs filesystem. The issue arises when creating a snapshot, where an anonymous device number is allocated and then inadvertently freed twice. The second free may result in releasing an already allocated anonymous device number, leading to unintended consequences. This can be observed in a trace where an attempt is made to free an anonymous device number that is not currently allocated. This vulnerability may cause issues in tasks that rely on backref walking or other subsystems in the kernel.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.