CVE-2024-46841

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46841
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() We handle errors here properly, ENOMEM isn't fatal, return the error.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/135b4819f6fba87fd5a2693023133e78ac73f1d3
https://git.kernel.org/stable/c/704c359b4093a2af650a20eaa030c435d7c30f91 Patch
https://git.kernel.org/stable/c/a580fb2c3479d993556e1c31b237c9e5be4944a3 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Dec 2024, 13:10

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/135b4819f6fba87fd5a2693023133e78ac73f1d3 -

08 Oct 2024, 18:17

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/704c359b4093a2af650a20eaa030c435d7c30f91 - () https://git.kernel.org/stable/c/704c359b4093a2af650a20eaa030c435d7c30f91 - Patch
References () https://git.kernel.org/stable/c/a580fb2c3479d993556e1c31b237c9e5be4944a3 - () https://git.kernel.org/stable/c/a580fb2c3479d993556e1c31b237c9e5be4944a3 - Patch
CWE NVD-CWE-noinfo

30 Sep 2024, 12:45

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: no BUG_ON en ENOMEM desde btrfs_lookup_extent_info() en walk_down_proc(). Aquí manejamos los errores correctamente, ENOMEM no es fatal, devuelve el error.

27 Sep 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-27 13:15

Updated : 2024-12-09 13:10

NVD link : CVE-2024-46841

Mitre link : CVE-2024-46841

CVE.ORG link : CVE-2024-46841

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo