CVE-2024-46753

Published: Sep 18, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() we BUG_ON(ret) from btrfs_dec_ref(). This is incorrect, we have proper error handling here, return the error.

Affected (5)

Products: Linux: Linux Kernel

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 5.10.236
Linux Linux Kernel	From 5.11 to 5.15.180
Linux Linux Kernel	From 5.16 to 6.1.134
Linux Linux Kernel	From 6.2 to 6.6.87
Linux Linux Kernel	From 6.7 to 6.10.10

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (8)

https://git.kernel.org/stable/c/0e4840ae09f375381167000ce47424818fcbcc7c

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/2c4fe45351e544da4b8f10c74b277117a4fa7869

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/5eb178f373b4f16f3b42d55ff88fc94dd95b93b1

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/67e4ca7ddc67ef949326b4dc404a9678bbe67d72

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/9c8237021b53d52357c0de07a768582fafb2791d

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a7f16a7a709845855cb5a0e080a52bda5873f9de

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.