PT-2024-26738
CVE-2024-35784
·
تاريخ النشر
2024-02-12
·
تاريخ التحديث
2026-10-18
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A deadlock vulnerability has been resolved in the Linux kernel, specifically in the btrfs file system. The issue occurs when the fiemap and extent locking mechanisms interact, potentially causing a deadlock. This happens because the extent lock is held for the entire range during the fiemap operation, which can lead to a situation where a page fault occurs while the lock is still held, resulting in a deadlock. The vulnerability exists in the normal code but was not previously noticed due to the lack of lockdep annotations. To fix this, the patch simply does not take the extent lock for the entire duration of the fiemap, which is safe because the code keeps track of its position in the tree.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾