In the Linux kernel, the following vulnerability has been resolved:
btrfs: send: handle path ref underflow in header iterateinoderef()
Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.
[
{
"target": {
"file": "fs/btrfs/send.c"
},
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ae356c627b493323e1433dcb27a26917668c07c",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-35935-2bfe8989"
},
{
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ae356c627b493323e1433dcb27a26917668c07c",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-35935-33ccaa12"
},
{
"target": {
"file": "fs/btrfs/send.c"
},
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@024529c27c8b4b273325a169e078337c8279e229",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-35935-43e02f01"
},
{
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@024529c27c8b4b273325a169e078337c8279e229",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-35935-6faaa555"
},
{
"target": {
"file": "fs/btrfs/send.c"
},
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6ee34c6f9cd12802326da26631232a61743501",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-35935-b242b5a2"
},
{
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be2b6bcc936ae17f42fff6494106a5660b35d8d3",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-35935-bc7392ec"
},
{
"target": {
"file": "fs/btrfs/send.c"
},
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-35935-cd268356"
},
{
"target": {
"file": "fs/btrfs/send.c"
},
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be2b6bcc936ae17f42fff6494106a5660b35d8d3",
"deprecated": false,
"signature_type": "Line",
"id": "CVE-2024-35935-d9c2e017"
},
{
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6ee34c6f9cd12802326da26631232a61743501",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-35935-e07472c2"
},
{
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a",
"deprecated": false,
"signature_type": "Function",
"id": "CVE-2024-35935-fadb5403"
}
]