CVE-2024-26791: btrfs: dev-replace: properly validate device names
In the Linux kernel, the following vulnerability has been resolved:
btrfs: dev-replace: properly validate device names
There's a syzbot report that device name buffers passed to device replace are not properly checked for string termination which could lead to a read out of bounds in getnamekernel().
Add a helper that validates both source and target device name buffers. For devid as the source initialize the buffer to empty string in case something tries to read it later.
This was originally analyzed and fixed in a different way by Edward Adam Davis (see links).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26791?
CVE-2024-26791 is classified with a high severity due to potential memory corruption issues.
How do I fix CVE-2024-26791?
To fix CVE-2024-26791, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which Linux kernel versions are affected by CVE-2024-26791?
CVE-2024-26791 affects Linux kernel versions from 4.19.309 up to and including 6.8-rc6.
What components are impacted by CVE-2024-26791?
CVE-2024-26791 impacts the btrfs device replace functionality within the Linux kernel.
Is there a known exploit for CVE-2024-26791?
As of now, specific exploits for CVE-2024-26791 have not been publicly disclosed.