CVE-2024-56758
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-56758 is a vulnerability in the Linux kernel's btrfs file system. It arises when a thread modifies the folio mapping after it has been unlocked during the process of bringing a folio up to date. This can result in an invalid page and a crash, as demonstrated by the provided kernel crash log. The issue occurs due to a race condition between the call to btrfs_read_folio() and the call to folio_lock() in the function relocate_one_folio(). This vulnerability was resolved, but it's important to note that the reported crash isn't directly linked to the initial patch that introduced the race condition, but rather to a more recent change that made it manifest in practice.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX