PT-2024-26756

CVE-2024-35832

·

Published

2024-01-16

·

Updated

2026-10-09

Description by

CVSS 4.0
7.1
High
MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.7.0-rc7-custom+
Description The vulnerability is related to the bcachefs filesystem in the Linux kernel. The issue arises from the incorrect freeing of memory allocated for bch fs::snapshots using kfree instead of kvfree. This can lead to a page fault when the umount command is executed. The vulnerability is identified by the error message "BUG: unable to handle page fault for address" and is associated with a supervisor read access in kernel mode.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for the bcachefs vulnerability. Ensure that the bch fs::snapshots memory is freed using kvfree instead of kfree to prevent page faults during the umount process.
Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾