CVE-2024-49932

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.10.0-rc7+

Description: The issue arises when the Linux kernel's btrfs filesystem is backed by a RAID stripe tree and readahead is performed on the relocation inode. This can lead to an ENOENT error due to preallocated extents not being mapped in the RST, causing the readahead to submit invalid reads to the device. As a result, an assertion occurs in the scatter-gather list code, leading to a kernel bug. The blk rq map sg function is involved in this process, and the error can cause the system to crash.

Recommendations: To resolve this issue, update the Linux kernel to a version newer than 6.10.0-rc7+. As a temporary workaround, consider disabling the readahead on relocation inode for btrfs filesystems to minimize the risk of exploitation.