CVE-2024-50225
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 9, 2024
Updated: Nov 13, 2024
CWE ID 476
Summary
CVE-2024-50225: A vulnerability in the Linux kernel's btrfs file system affects the propagation of errors in split bios. When btrfs sends a btrfs_bio to mirrored devices, it calls btrfs_bio_end_io() upon completion. If the btrfs_bio was split, its end_io function is btrfs_orig_write_end_io. In certain instances, the orig_bbio's bio context may not be properly set, leading to a NULL pointer dereference. This issue is easily reproducible on zoned devices and can result in a kernel panic.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX