CVE-2024-56774

Summary

CVE-2024-56774 is a vulnerability affecting the Linux kernel's btrfs file system. The issue was identified by Syzbot and involves a null-ptr dereference in the function btrfs_search_slot(). The vulnerability occurs when the extent tree root is corrupted, making the extent tree NULL. In such cases, btrfs_search_slot() fails to perform a sanity check on the root before using it, resulting in a null-ptr dereference. To mitigate this issue, a new sanity check has been added to ensure that the btrfs root is valid before being used in btrfs_search_slot().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.