Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43885
HistoryAug 26, 2024 - 10:10 a.m.

CVE-2024-43885 btrfs: fix double inode unlock for direct IO sync writes

2024-08-2610:10:36
Linux
github.com
2
linux kernel
btrfs
inode unlock
direct io
sync writes

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix double inode unlock for direct IO sync writes

If we do a direct IO sync write, at btrfs_sync_file(), and we need to skip
inode logging or we get an error starting a transaction or an error when
flushing delalloc, we end up unlocking the inode when we shouldn’t under
the ‘out_release_extents’ label, and then unlock it again at
btrfs_direct_write().

Fix that by checking if we have to skip inode unlocking under that label.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43885