oss-security - CVE-2024-50217: Linux kernel: btrfs: Use-after-free of block device file in __btrfs_free_extra

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID:
	<VI0P189MB276612AABA4D5DB2B4018524AEB72@VI0P189MB2766.EURP189.PROD.OUTLOOK.COM>
Date: Thu, 10 Apr 2025 12:22:46 +0000
From: "akendo@...ndo.eu" <akendo@...ndo.eu>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: CVE-2024-50217: Linux kernel: btrfs: Use-after-free of block device file in __btrfs_free_extra_devids()

Hey everyone,

Not too sure how or whom to ask about: But I saw that there is CVE-2024-50217 that affects every kernel since 4.8.

However, it is only fixed on more recent version of the linux kernel like 6.11 or 6.12. Any reason this wasn’t backported to older kernel versions?

Best regards,
Akendo

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.