CVE-2024-50088

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the add inode ref() function in the fs/btrfs/tree-log.c module of the Linux kernel's btrfs file system. It involves the use of an uninitialized variable, which can be exploited to impact the confidentiality, integrity, and availability of protected information. The add inode ref() function does not initialize the name struct when it is declared. If certain calls to read one inode() return NULL, the name.name would be freed before being initialized, due to the kfree(name.name) call in the out section.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.