CVE-2024-26944

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.8.0-rc5-kts #1

Description The issue is related to a use-after-free vulnerability in the do zone finish() function of the btrfs module. This vulnerability can be triggered by a device replace operation in fstests btrfs/070, causing a slab-use-after-free error. The sequence of events leading to this vulnerability involves the replacement of devices, freeing of a source device, and subsequent access to stale zone information of the removed device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.