CVE-2024-35936: btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: handle chunk tree lookup error in btrfsrelocatesyschunks()
The unhandled case in btrfsrelocatesyschunks() loop is a corruption, as it could be caused only by two impossible conditions:
- at first the search key is set up to look for a chunk tree item, with offset -1, this is an inexact search and the key->offset will contain the correct offset upon a successful search, a valid chunk tree item cannot have an offset -1
- after first successful search, the foundkey corresponds to a chunk item, the offset is decremented by 1 before the next loop, it's impossible to find a chunk item there due to alignment and size constraints
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35936?
CVE-2024-35936 has a high severity rating due to the potential for data corruption.
How do I fix CVE-2024-35936?
To fix CVE-2024-35936, update your Linux kernel to the latest version that is not affected.
Which Linux kernel versions are affected by CVE-2024-35936?
CVE-2024-35936 affects specific versions of the Linux kernel including 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, and 6.12.11-1.
What type of vulnerability is CVE-2024-35936?
CVE-2024-35936 is a vulnerability related to an unhandled error in the btrfs filesystem handling in the Linux kernel.
Who is responsible for mitigating CVE-2024-35936?
System administrators and users of affected Linux kernel versions are responsible for mitigating CVE-2024-35936.