CVE Catalog
CVE-2024-50217
LowSummary
In the Linux kernel's btrfs filesystem, a use-after-free of the block device file occurs in __btrfs_free_extra_devids(). The issue may arise when mounting two btrfs images with the same fsid.
Risk Assessment
Use-after-free could lead to system crash or potential privilege escalation, especially in environments with multiple btrfs images.
Recommendation
Update the Linux kernel to a patched version and avoid mounting multiple btrfs images with the same fsid.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids() Mounting btrfs from two images (which have the same one fsid and two different dev_uuids) in certain executing order may trigger an UAF for variable 'de