CVE-2024-56774

216.73.216.86

· Published 08/01/2025 18:15 · Modified 09/01/2025 21:00

Labels: CVE-2024-56774 2025-01-08 416baaa9-dc9f-4396-8d5f-8c081fb06d67 CVE-2024-56774 CWE-476

Essential information

Published: 08/01/2025 18:15
Modified: 09/01/2025 21:00
Author: —
Creator: —
CVSS: 5.5 MEDIUM (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS metrics

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: add a sanity check for btrfs root in btrfs_search_slot() Syzbot reports a null-ptr-deref in btrfs_search_slot(). The reproducer is using rescue=ibadroots, and the extent tree root is corrupted thus the extent tree is NULL. When scrub tries to search the extent tree to gather the needed extent info, btrfs_search_slot() doesn't check if the target root is NULL or not, resulting the null-ptr-deref. Add sanity check for btrfs root before using it in btrfs_search_slot().

NVD status

Status: Analyzed — CVE has had analysis completed and all data associations made.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD: View on NVD

Affected products (CPE)

Product	CPE
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel:6.13:rc1::::::`