cbcvebase.
CVE-2024-50088
published 2024-10-29

CVE-2024-50088: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in add_inode_ref() The add_inode_ref() function does…

PriorityP337high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.21%
11.9th percentile
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free in add_inode_ref() The add_inode_ref() function does not initialize the "name" struct when it is declared. If any of the following calls to "read_one_inode() returns NULL, dir = read_one_inode(root, parent_objectid); if (!dir) { ret = -ENOENT; goto out; } inode = read_one_inode(root, inode_objectid); if (!inode) { ret = -EIO; goto out; } then "name.name" would be freed on "out" before being initialized. out: ... kfree(name.name); This issue was reported by Coverity with CID 1526744.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.115-1 (bookworm)linux 6.1.115-1 (bookworm)
debianlinux-6.1< linux 6.1.115-1 (bookworm)linux 6.1.115-1 (bookworm)
linuxlinux
linuxlinux>= 1cf474cd474bc5d3ef63086ffd009a87a5b7bb2e < 12cf028381aa19bc38465341512c280256e8d82d12cf028381aa19bc38465341512c280256e8d82d
linuxlinux>= 6.1.57 < 6.1.1146.1.114
linuxlinux>= e43eec81c5167b655b72c781b0e75e62a05e415e < e11ce03b58743bf1e096c48fcaa7e6f08eb75dfae11ce03b58743bf1e096c48fcaa7e6f08eb75dfa
linuxlinux>= e43eec81c5167b655b72c781b0e75e62a05e415e < a941f3d5b1469c60a7e70e775584f110b47e0d16a941f3d5b1469c60a7e70e775584f110b47e0d16
linuxlinux>= e43eec81c5167b655b72c781b0e75e62a05e415e < 66691c6e2f18d2aa4b22ffb624b9bdc97e9979e466691c6e2f18d2aa4b22ffb624b9bdc97e9979e4
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.115-16.1.115-1
linuxlinux_kernel>= 0 < 6.11.5-16.11.5-1
linuxlinux_kernel>= 0 < 6.11.5-16.11.5-1
linuxlinux_kernel>= 0 < 6.8.0-56.586.8.0-56.58
linuxlinux_kernel>= 0 < 6.11.0-18.186.11.0-18.18
linuxlinux_kernel>= 6.1.57 < 6.1.1146.1.114
linuxlinux_kernel>= 6.2 < 6.6.586.6.58
linuxlinux_kernel>= 6.7 < 6.11.56.11.5
msrcazl3_kernel_6.6.57.1-7_on_azure_linux_3.0
msrcazl3_kernel_6.6.64.2-1_on_azure_linux_3.0

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_msrc6.6MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.