CVE-2024-35935

btrfs: send: handle path ref underflow in header iterate_inode_ref()

State: Published
Severity: Not scored
Published: May 19, 2024
Updated: Oct 15, 2026
Reserved: May 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: send: handle path ref underflow in header iterate_inode_ref()

Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	31db9f7c23fbf7e95026143f79645de6507b583b to before be2b6bcc936ae17f42fff6494106a5660b35d8d3Affected 31db9f7c23fbf7e95026143f79645de6507b583b to before 024529c27c8b4b273325a169e078337c8279e229Affected 31db9f7c23fbf7e95026143f79645de6507b583b to before 4720d590c4cb5d9ffa0060b89743651cc7e995f9Affected 31db9f7c23fbf7e95026143f79645de6507b583b to before 2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330aAffected 31db9f7c23fbf7e95026143f79645de6507b583b to before 9ae356c627b493323e1433dcb27a26917668c07cAffected 31db9f7c23fbf7e95026143f79645de6507b583b to before c1363ed8867b81ea169fba2ccc14af96a85ed183Affected 31db9f7c23fbf7e95026143f79645de6507b583b to before 03938619a1e718b6168ae4528e1b0f979293f1a5Affected 31db9f7c23fbf7e95026143f79645de6507b583b to before 3c6ee34c6f9cd12802326da26631232a61743501Affected
LinuxLinux	3.6Affected before 3.6Not affected 4.19.312 through 4.19.Not affected 5.4.274 through 5.4.Not affected 5.10.215 through 5.10.Not affected 5.15.155 through 5.15.Not affected 6.1.86 through 6.1.Not affected 6.6.27 through 6.6.Not affected 6.8.6 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

31db9f7c23fbf7e95026143f79645de6507b583b to before be2b6bcc936ae17f42fff6494106a5660b35d8d3Affected
31db9f7c23fbf7e95026143f79645de6507b583b to before 024529c27c8b4b273325a169e078337c8279e229Affected
31db9f7c23fbf7e95026143f79645de6507b583b to before 4720d590c4cb5d9ffa0060b89743651cc7e995f9Affected
31db9f7c23fbf7e95026143f79645de6507b583b to before 2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330aAffected
31db9f7c23fbf7e95026143f79645de6507b583b to before 9ae356c627b493323e1433dcb27a26917668c07cAffected
31db9f7c23fbf7e95026143f79645de6507b583b to before c1363ed8867b81ea169fba2ccc14af96a85ed183Affected
31db9f7c23fbf7e95026143f79645de6507b583b to before 03938619a1e718b6168ae4528e1b0f979293f1a5Affected
31db9f7c23fbf7e95026143f79645de6507b583b to before 3c6ee34c6f9cd12802326da26631232a61743501Affected

LinuxLinux

3.6Affected
before 3.6Not affected
4.19.312 through 4.19.*Not affected
5.4.274 through 5.4.*Not affected
5.10.215 through 5.10.*Not affected
5.15.155 through 5.15.*Not affected
6.1.86 through 6.1.*Not affected
6.6.27 through 6.6.*Not affected
6.8.6 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.