CVE-2024-46752: btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
In the Linux kernel, the following vulnerability has been resolved:
btrfs: replace BUGON() with error handling at updaterefforcow()
Instead of a BUGON() just return an error, log an error message and abort the transaction in case we find an extent buffer belonging to the relocation tree that doesn't have the full backref flag set. This is unexpected and should never happen (save for bugs or a potential bad memory).
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46752?
CVE-2024-46752 has a medium severity level due to potential transaction aborts affecting data integrity.
How do I fix CVE-2024-46752?
To remediate CVE-2024-46752, update to the fixed versions of the Linux kernel: 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2024-46752?
CVE-2024-46752 affects various versions of the Linux kernel, particularly those prior to 5.10.226-1.
What components are involved in CVE-2024-46752?
CVE-2024-46752 involves the Btrfs file system, specifically related to error handling in the update_ref_for_cow() function.
Is there a workaround for CVE-2024-46752?
No specific workaround is provided for CVE-2024-46752; the recommended approach is to apply the kernel updates.