CVE-2024-56758

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 6, 2025
Updated: Jan 7, 2025
CWE ID 476

Summary

CVE-2024-56758 is a vulnerability in the Linux kernel's btrfs file system. It arises when a thread modifies the folio mapping after it has been unlocked during the process of bringing a folio up to date. This can result in an invalid page and a crash, as demonstrated by the provided kernel crash log. The issue occurs due to a race condition between the call to btrfs_read_folio() and the call to folio_lock() in the function relocate_one_folio(). This vulnerability was resolved, but it's important to note that the reported crash isn't directly linked to the initial patch that introduced the race condition, but rather to a more recent change that made it manifest in practice.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share