CVE-2024-35849 — Use of Uninitialized Resource in Linux
Severity
7.1HIGHNVD
OSV7.0OSV6.5OSV5.5
EPSS
0.0%
top 97.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 17
Latest updateNov 19
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
Syzbot reported the following information leak for in
btrfs_ioctl_logical_to_ino():
BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline]
BUG: KMSAN: kernel-infoleak in _copy_to_user+0xbc/0x110 lib/usercopy.c:40
instrument_copy_to_user include/linux/instrumented.h:114 [inline]
_copy_to_user+0xbc/0x110 lib/usercopy.c:40
copy_…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages7 packages
▶CVEListV5linux/linuxa542ad1bafc7df9fc16de8a6894b350a4df75572 — 689efe22e9b5b7d9d523119a9a5c3c17107a0772+8
Also affects: Debian Linux 10.0
Patches
🔴Vulnerability Details
30📋Vendor Advisories
30💬Community
1Bugzilla
▶