SECUFOCUSNOW
Home›CVE index›CVE-2024-39496
Review reviewHigh

CVE-2024-39496

Linux Linux, debian linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to race with dev replace While loading a zone's info during creation of a block group, we can race with a device replace operation and then trigger a use-after-free on the device that was just replaced (source device of the replace operation). This happens because at btrfs_load_zone_info() we extract a device from the chunk map into a local variable and then use the device while not under the protection of the device replace rwsem. So if there's a device replace operation happening when...

CVSS
7.8
EPSS
0.29%
21.0% percentile
CISA KEV
Not listed
Published
2024.07.12
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.29%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to race with dev replace While loading a zone's info during creation of a block group, we can race with a device replace operation and then trigger a use-after-free on the device that was just replaced (source device of the replace operation). This happens because at btrfs_load_zone_info() we extract a device from the chunk map into a local variable and then use the device while not under the protection of the device replace rwsem. So if there's a device replace operation happening when...

Affected product and versions

Product
Linux Linux, debian linux, linux kernel
Affected versions
>= 5b316468983dfa9473ff0f1c42e4e30b4c267141 < 17765964703b88d8befd899f8501150bb7e07e43, >= 5b316468983dfa9473ff0f1c42e4e30b4c267141 < 092571ef9a812566c8f2c9038d9c2a64c49788d6, >= 5b316468983dfa9473ff0f1c42e4e30b4c267141 < a0cc006f4214b87e70983c692e05bb36c59b5752, >= 5b316468983dfa9473ff0f1c42e4e30b4c267141 < 0090d6e1b210551e63cf43958dc7a1ec942cdde9, >= 5.11, 11.0, >= 5.12 < 6.1.95, >= 6.2 < 6.6.35, >= 6.7 < 6.9.6
Fixed versions
6.1.95, 6.6.35, 6.9.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, debian linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416
CVE-2024-39496 — Linux Linux, debian linux, linux kernel | SECUFOCUS NOW