CVE-2024-42314

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-42314
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42314.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-42314
Downstream
Related
Published
2024-08-17T09:09:23.047Z
Modified
2025-11-20T06:01:20.631218Z
Summary
btrfs: fix extent map use-after-free when adding pages to compressed bio
Details

In the Linux kernel, the following vulnerability has been resolved:

btrfs: fix extent map use-after-free when adding pages to compressed bio

At addrabiopages() we are accessing the extent map to calculate 'addsize' after we dropped our reference on the extent map, resulting in a use-after-free. Fix this by computing 'add_size' before dropping our extent map reference.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6a4049102055250256623ab1875fabd89004bff8
Fixed
c1cc3326e27b0bd7a2806b40bc48e49afaf951e7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6a4049102055250256623ab1875fabd89004bff8
Fixed
c205565e0f2f439f278a4a94ee97b67ef7b56ae8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6a4049102055250256623ab1875fabd89004bff8
Fixed
b7859ff398b6b656e1689daa860eb34837b4bb89
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6a4049102055250256623ab1875fabd89004bff8
Fixed
8e7860543a94784d744c7ce34b78a2e11beefa5c

Affected versions

v5.*

v5.15
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.2
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "fs/btrfs/compression.c"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1cc3326e27b0bd7a2806b40bc48e49afaf951e7",
        "signature_version": "v1",
        "id": "CVE-2024-42314-08eb474c",
        "digest": {
            "line_hashes": [
                "67749775224064646376503061259370158273",
                "90541006744831748485485326715147548240",
                "273704960970581834155188465428280187556",
                "202400239895023918506779491354866034901",
                "333045044751270308031364486551031062158",
                "133181815135259353429109785235348507683",
                "234788002421877138332379182859481300371",
                "129653851516808984935240612999324105547"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c205565e0f2f439f278a4a94ee97b67ef7b56ae8",
        "signature_version": "v1",
        "id": "CVE-2024-42314-0e1d90d5",
        "digest": {
            "line_hashes": [
                "67749775224064646376503061259370158273",
                "90541006744831748485485326715147548240",
                "273704960970581834155188465428280187556",
                "202400239895023918506779491354866034901",
                "333045044751270308031364486551031062158",
                "296822019489907290374850219103359610975",
                "332232889658214694995338268622465274126",
                "127858174219725590701317967683049686434"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c",
            "function": "add_ra_bio_pages"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7859ff398b6b656e1689daa860eb34837b4bb89",
        "signature_version": "v1",
        "id": "CVE-2024-42314-36d05d2d",
        "digest": {
            "length": 2312.0,
            "function_hash": "3445870724811230140882328095098879342"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b7859ff398b6b656e1689daa860eb34837b4bb89",
        "signature_version": "v1",
        "id": "CVE-2024-42314-8215cb62",
        "digest": {
            "line_hashes": [
                "67749775224064646376503061259370158273",
                "90541006744831748485485326715147548240",
                "273704960970581834155188465428280187556",
                "202400239895023918506779491354866034901",
                "333045044751270308031364486551031062158",
                "296822019489907290374850219103359610975",
                "332232889658214694995338268622465274126",
                "127858174219725590701317967683049686434"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c",
            "function": "add_ra_bio_pages"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c205565e0f2f439f278a4a94ee97b67ef7b56ae8",
        "signature_version": "v1",
        "id": "CVE-2024-42314-d9b8b95b",
        "digest": {
            "length": 2330.0,
            "function_hash": "124198234489765593601170227826462439662"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c",
            "function": "add_ra_bio_pages"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7860543a94784d744c7ce34b78a2e11beefa5c",
        "signature_version": "v1",
        "id": "CVE-2024-42314-da35443d",
        "digest": {
            "length": 2310.0,
            "function_hash": "66737086596417259422648606863741654533"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7860543a94784d744c7ce34b78a2e11beefa5c",
        "signature_version": "v1",
        "id": "CVE-2024-42314-dfee2d92",
        "digest": {
            "line_hashes": [
                "67749775224064646376503061259370158273",
                "90541006744831748485485326715147548240",
                "273704960970581834155188465428280187556",
                "202400239895023918506779491354866034901",
                "333045044751270308031364486551031062158",
                "296822019489907290374850219103359610975",
                "332232889658214694995338268622465274126",
                "127858174219725590701317967683049686434"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line"
    },
    {
        "target": {
            "file": "fs/btrfs/compression.c",
            "function": "add_ra_bio_pages"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1cc3326e27b0bd7a2806b40bc48e49afaf951e7",
        "signature_version": "v1",
        "id": "CVE-2024-42314-fc5df055",
        "digest": {
            "length": 2273.0,
            "function_hash": "234697348794662980302655732084410104774"
        },
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.108
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.44
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.3