CVE-2024-46840 (GCVE-0-2024-46840)

Vulnerability from cvelistv5 – Published: 2024-09-27 12:39 – Updated: 2026-05-11 20:37
VLAI
Title
btrfs: clean up our handling of refs == 0 in snapshot delete
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: clean up our handling of refs == 0 in snapshot delete In reada we BUG_ON(refs == 0), which could be unkind since we aren't holding a lock on the extent leaf and thus could get a transient incorrect answer. In walk_down_proc we also BUG_ON(refs == 0), which could happen if we have extent tree corruption. Change that to return -EUCLEAN. In do_walk_down() we catch this case and handle it correctly, however we return -EIO, which -EUCLEAN is a more appropriate error code. Finally in walk_up_proc we have the same BUG_ON(refs == 0), so convert that to proper error handling. Also adjust the error message so we can actually do something with the information.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < c847b28a799733b04574060ab9d00f215970627d (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < 71291aa7246645ef622621934d2067400380645e (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < c60676b81fab456b672796830f6d8057058f029c (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < 728d4d045b628e006b48a448f3326a7194c88d32 (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < 9cc887ac24b7a0598f4042ae9af6b9a33072f75b (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < 7d1df13bf078ffebfedd361d714ff6cee1ff01b9 (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < 03804641ec2d0da4fa088ad21c88e703d151ce16 (git)
Affected: 2c47e605a91dde6b0514f689645e7ab336c8592a , < b8ccef048354074a548f108e51d0557d6adfd3a3 (git)
Create a notification for this product.
Linux Linux Affected: 2.6.31
Unaffected: 0 , < 2.6.31 (semver)
Unaffected: 4.19.322 , ≤ 4.19.* (semver)
Unaffected: 5.4.284 , ≤ 5.4.* (semver)
Unaffected: 5.10.226 , ≤ 5.10.* (semver)
Unaffected: 5.15.167 , ≤ 5.15.* (semver)
Unaffected: 6.1.110 , ≤ 6.1.* (semver)
Unaffected: 6.6.51 , ≤ 6.6.* (semver)
Unaffected: 6.10.10 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46840",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T13:59:36.735049Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T13:59:41.445Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:28.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/extent-tree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c847b28a799733b04574060ab9d00f215970627d",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "71291aa7246645ef622621934d2067400380645e",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "c60676b81fab456b672796830f6d8057058f029c",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "728d4d045b628e006b48a448f3326a7194c88d32",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "9cc887ac24b7a0598f4042ae9af6b9a33072f75b",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "7d1df13bf078ffebfedd361d714ff6cee1ff01b9",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "03804641ec2d0da4fa088ad21c88e703d151ce16",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            },
            {
              "lessThan": "b8ccef048354074a548f108e51d0557d6adfd3a3",
              "status": "affected",
              "version": "2c47e605a91dde6b0514f689645e7ab336c8592a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/extent-tree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.31"
            },
            {
              "lessThan": "2.6.31",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.322",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.226",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.51",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.322",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.284",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.226",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.167",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.110",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.51",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.10",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: clean up our handling of refs == 0 in snapshot delete\n\nIn reada we BUG_ON(refs == 0), which could be unkind since we aren\u0027t\nholding a lock on the extent leaf and thus could get a transient\nincorrect answer.  In walk_down_proc we also BUG_ON(refs == 0), which\ncould happen if we have extent tree corruption.  Change that to return\n-EUCLEAN.  In do_walk_down() we catch this case and handle it correctly,\nhowever we return -EIO, which -EUCLEAN is a more appropriate error code.\nFinally in walk_up_proc we have the same BUG_ON(refs == 0), so convert\nthat to proper error handling.  Also adjust the error message so we can\nactually do something with the information."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:37:33.572Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d"
        },
        {
          "url": "https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e"
        },
        {
          "url": "https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c"
        },
        {
          "url": "https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32"
        },
        {
          "url": "https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b"
        },
        {
          "url": "https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16"
        },
        {
          "url": "https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3"
        }
      ],
      "title": "btrfs: clean up our handling of refs == 0 in snapshot delete",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46840",
    "datePublished": "2024-09-27T12:39:34.998Z",
    "dateReserved": "2024-09-11T15:12:18.288Z",
    "dateUpdated": "2026-05-11T20:37:33.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-46840",
      "date": "2026-05-27",
      "epss": "7e-05",
      "percentile": "0.00579"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.19.322\", \"matchCriteriaId\": \"29162FB8-5FA4-4DC4-86CE-5EB0CAEEF2F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.284\", \"matchCriteriaId\": \"6265A402-9C3C-438F-BFC5-4194B2568B85\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.226\", \"matchCriteriaId\": \"864FC17C-501A-4823-A643-6F35D65D8A97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.167\", \"matchCriteriaId\": \"043405A4-25FE-45D4-A7BB-2A0C3B7D17C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.110\", \"matchCriteriaId\": \"6B1A95FC-7E7E-428B-BB59-F76640C652AE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.51\", \"matchCriteriaId\": \"E4529134-BAC4-4776-840B-304009E181A0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.10\", \"matchCriteriaId\": \"ACDEE48C-137A-4731-90D0-A675865E1BED\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: clean up our handling of refs == 0 in snapshot delete\\n\\nIn reada we BUG_ON(refs == 0), which could be unkind since we aren\u0027t\\nholding a lock on the extent leaf and thus could get a transient\\nincorrect answer.  In walk_down_proc we also BUG_ON(refs == 0), which\\ncould happen if we have extent tree corruption.  Change that to return\\n-EUCLEAN.  In do_walk_down() we catch this case and handle it correctly,\\nhowever we return -EIO, which -EUCLEAN is a more appropriate error code.\\nFinally in walk_up_proc we have the same BUG_ON(refs == 0), so convert\\nthat to proper error handling.  Also adjust the error message so we can\\nactually do something with the information.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: limpia nuestro manejo de refs == 0 en la eliminaci\\u00f3n de instant\\u00e1neas En reada tenemos BUG_ON(refs == 0), lo que podr\\u00eda ser desagradable ya que no estamos manteniendo un bloqueo en la hoja de extensi\\u00f3n y, por lo tanto, podr\\u00edamos obtener una respuesta incorrecta transitoria. En walk_down_proc tambi\\u00e9n tenemos BUG_ON(refs == 0), lo que podr\\u00eda suceder si tenemos corrupci\\u00f3n del \\u00e1rbol de extensi\\u00f3n. Cambia eso para que devuelva -EUCLEAN. En do_walk_down() capturamos este caso y lo manejamos correctamente, sin embargo, devolvemos -EIO, que -EUCLEAN es un c\\u00f3digo de error m\\u00e1s apropiado. Finalmente, en walk_up_proc tenemos el mismo BUG_ON(refs == 0), as\\u00ed que convi\\u00e9rtelo en un manejo de errores adecuado. Tambi\\u00e9n ajusta el mensaje de error para que podamos hacer algo con la informaci\\u00f3n.\"}]",
      "id": "CVE-2024-46840",
      "lastModified": "2024-10-08T18:15:07.857",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-09-27T13:15:16.057",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-46840\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-09-27T13:15:16.057\",\"lastModified\":\"2025-11-03T23:16:07.230\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: clean up our handling of refs == 0 in snapshot delete\\n\\nIn reada we BUG_ON(refs == 0), which could be unkind since we aren\u0027t\\nholding a lock on the extent leaf and thus could get a transient\\nincorrect answer.  In walk_down_proc we also BUG_ON(refs == 0), which\\ncould happen if we have extent tree corruption.  Change that to return\\n-EUCLEAN.  In do_walk_down() we catch this case and handle it correctly,\\nhowever we return -EIO, which -EUCLEAN is a more appropriate error code.\\nFinally in walk_up_proc we have the same BUG_ON(refs == 0), so convert\\nthat to proper error handling.  Also adjust the error message so we can\\nactually do something with the information.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: limpia nuestro manejo de refs == 0 en la eliminaci\u00f3n de instant\u00e1neas En reada tenemos BUG_ON(refs == 0), lo que podr\u00eda ser desagradable ya que no estamos manteniendo un bloqueo en la hoja de extensi\u00f3n y, por lo tanto, podr\u00edamos obtener una respuesta incorrecta transitoria. En walk_down_proc tambi\u00e9n tenemos BUG_ON(refs == 0), lo que podr\u00eda suceder si tenemos corrupci\u00f3n del \u00e1rbol de extensi\u00f3n. Cambia eso para que devuelva -EUCLEAN. En do_walk_down() capturamos este caso y lo manejamos correctamente, sin embargo, devolvemos -EIO, que -EUCLEAN es un c\u00f3digo de error m\u00e1s apropiado. Finalmente, en walk_up_proc tenemos el mismo BUG_ON(refs == 0), as\u00ed que convi\u00e9rtelo en un manejo de errores adecuado. Tambi\u00e9n ajusta el mensaje de error para que podamos hacer algo con la informaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.19.322\",\"matchCriteriaId\":\"29162FB8-5FA4-4DC4-86CE-5EB0CAEEF2F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.284\",\"matchCriteriaId\":\"6265A402-9C3C-438F-BFC5-4194B2568B85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.226\",\"matchCriteriaId\":\"864FC17C-501A-4823-A643-6F35D65D8A97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.167\",\"matchCriteriaId\":\"043405A4-25FE-45D4-A7BB-2A0C3B7D17C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.110\",\"matchCriteriaId\":\"6B1A95FC-7E7E-428B-BB59-F76640C652AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.51\",\"matchCriteriaId\":\"E4529134-BAC4-4776-840B-304009E181A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.10\",\"matchCriteriaId\":\"ACDEE48C-137A-4731-90D0-A675865E1BED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:19:28.536Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-46840\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-29T13:59:36.735049Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-29T13:59:37.873Z\"}}], \"cna\": {\"title\": \"btrfs: clean up our handling of refs == 0 in snapshot delete\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"c847b28a799733b04574060ab9d00f215970627d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"71291aa7246645ef622621934d2067400380645e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"c60676b81fab456b672796830f6d8057058f029c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"728d4d045b628e006b48a448f3326a7194c88d32\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"9cc887ac24b7a0598f4042ae9af6b9a33072f75b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"7d1df13bf078ffebfedd361d714ff6cee1ff01b9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"03804641ec2d0da4fa088ad21c88e703d151ce16\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2c47e605a91dde6b0514f689645e7ab336c8592a\", \"lessThan\": \"b8ccef048354074a548f108e51d0557d6adfd3a3\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/btrfs/extent-tree.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.31\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.31\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.322\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.284\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.226\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.167\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.110\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.51\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/btrfs/extent-tree.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/c847b28a799733b04574060ab9d00f215970627d\"}, {\"url\": \"https://git.kernel.org/stable/c/71291aa7246645ef622621934d2067400380645e\"}, {\"url\": \"https://git.kernel.org/stable/c/c60676b81fab456b672796830f6d8057058f029c\"}, {\"url\": \"https://git.kernel.org/stable/c/728d4d045b628e006b48a448f3326a7194c88d32\"}, {\"url\": \"https://git.kernel.org/stable/c/9cc887ac24b7a0598f4042ae9af6b9a33072f75b\"}, {\"url\": \"https://git.kernel.org/stable/c/7d1df13bf078ffebfedd361d714ff6cee1ff01b9\"}, {\"url\": \"https://git.kernel.org/stable/c/03804641ec2d0da4fa088ad21c88e703d151ce16\"}, {\"url\": \"https://git.kernel.org/stable/c/b8ccef048354074a548f108e51d0557d6adfd3a3\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: clean up our handling of refs == 0 in snapshot delete\\n\\nIn reada we BUG_ON(refs == 0), which could be unkind since we aren\u0027t\\nholding a lock on the extent leaf and thus could get a transient\\nincorrect answer.  In walk_down_proc we also BUG_ON(refs == 0), which\\ncould happen if we have extent tree corruption.  Change that to return\\n-EUCLEAN.  In do_walk_down() we catch this case and handle it correctly,\\nhowever we return -EIO, which -EUCLEAN is a more appropriate error code.\\nFinally in walk_up_proc we have the same BUG_ON(refs == 0), so convert\\nthat to proper error handling.  Also adjust the error message so we can\\nactually do something with the information.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.322\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.284\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.226\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.167\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.110\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.51\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.10\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"2.6.31\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:53:35.228Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-46840\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-05T10:53:35.228Z\", \"dateReserved\": \"2024-09-11T15:12:18.288Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-09-27T12:39:34.998Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.