CVE-2024-40962

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc2-kts+

Description The issue is related to a NULL pointer dereference in the btrfs zone finish endio() function when running the btrfs/167 test case on emulated zoned devices. This occurs because the ordered extent is missing a checksums list, which is expected when doing a NOCOW write. The btrfs zone finish endio() function is called when finishing an I/O operation on a zoned device. To exploit this issue, an attacker would need to be able to run the btrfs/167 test case on an emulated zoned device, which may require specific hardware and software configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.