{ "cveId": "CVE-2024-26644", "url": "https://patchblox.com/security/cve/CVE-2024-26644", "summary": "CVE-2024-26644 is fixed in 30 products on 1 platform, first by ALAS2023-2024-517, released February 15, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don\u0027t abort filesystem when attempting to...", "description": "In the Linux kernel, the following vulnerability has been resolved: btrfs: don\u0027t abort filesystem when attempting to snapshot deleted subvolume If the source file descriptor to the snapshot ioctl refers to a deleted subvolume, we get the following abort: BTRFS: Transaction aborted (error -2) WARNING: CPU: 0 PID: 833 at fs/btrfs/transaction.c:1875 create_pending_snapshot\u002B0x1040/0x1190 [btrfs] Modules linked in: pata_acpi btrfs ata_piix libata scsi_mod virtio_net blake2b_generic xor net_failover virtio_rng failover scsi_common rng_core raid6_pq libcrc32c CPU: 0 PID: 833 Comm: t_snapshot_dele Not tainted 6.7.0-rc6 #2 Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS 1.16.3-1.fc39 04/01/2014 RIP: 0010:create_pending_snapshot\u002B0x1040/0x1190 [btrfs] RSP: 0018:ffffa09c01337af8 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff9982053e7c78 RCX: 0000000000000027 RDX: ffff99827dc20848 RSI: 0000000000000001 RDI: ffff99827dc20840 RBP: ffffa09c01337c00 R08: 0000000000000000 R09: ffffa09c01337998 R10: 0000000000000003 R11: ffffffffb96da248 R12: fffffffffffffffe R13: ffff99820535bb28 R14: ffff99820b7bd000 R15: ffff99820381ea80 FS: 00007fe20aadabc0(0000) GS:ffff99827dc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000559a120b502f CR3: 00000000055b6000 CR4: 00000000000006f0 Call Trace: \u003CTASK\u003E ? create_pending_snapshot\u002B0x1040/0x1190 [btrfs] ? __warn\u002B0x81/0x130 ? create_pending_snapshot\u002B0x1040/0x1190 [btrfs] ? report_bug\u002B0x171/0x1a0 ? handle_bug\u002B0x3a/0x70 ? exc_invalid_op\u002B0x17/0x70 ? asm_exc_invalid_op\u002B0x1a/0x20 ? create_pending_snapshot\u002B0x1040/0x1190 [btrfs] ? create_pending_snapshot\u002B0x1040/0x1190 [btrfs] create_pending_snapshots\u002B0x92/0xc0 [btrfs] btrfs_commit_transaction\u002B0x66b/0xf40 [btrfs] btrfs_mksubvol\u002B0x301/0x4d0 [btrfs] btrfs_mksnapshot\u002B0x80/0xb0 [btrfs] __btrfs_ioctl_snap_create\u002B0x1c2/0x1d0 [btrfs] btrfs_ioctl_snap_create_v2\u002B0xc4/0x150 [btrfs] btrfs_ioctl\u002B0x8a6/0x2650 [btrfs] ? kmem_cache_free\u002B0x22/0x340 ? do_sys_openat2\u002B0x97/0xe0 __x64_sys_ioctl\u002B0x97/0xd0 do_syscall_64\u002B0x46/0xf0 entry_SYSCALL_64_after_hwframe\u002B0x6e/0x76 RIP: 0033:0x7fe20abe83af RSP: 002b:00007ffe6eff1360 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fe20abe83af RDX: 00007ffe6eff23c0 RSI: 0000000050009417 RDI: 0000000000000003 RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fe20ad16cd0 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe6eff13c0 R14: 00007fe20ad45000 R15: 0000559a120b6d58 \u003C/TASK\u003E ---[ end trace 0000000000000000 ]--- BTRFS: error (device vdc: state A) in create_pending_snapshot:1875: errno=-2 No such entry BTRFS info (device vdc: state EA): forced readonly BTRFS warning (device vdc: state EA): Skipping commit of aborted transaction. BTRFS: error (device vdc: state EA) in cleanup_transaction:2055: errno=-2 No such entry This happens because create_pending_snapshot() initializes the new root item as a copy of the source root item. This includes the refs field, which is 0 for a deleted subvolume. The call to btrfs_insert_root() therefore inserts a root with refs == 0. btrfs_get_new_fs_root() then finds the root and returns -ENOENT if refs == 0, which causes create_pending_snapshot() to abort. Fix it by checking the source root\u0027s refs before attempting the snapshot, but after locking subvol_sem to avoid racing with deletion.", "published": "2024-02-15T02:51:00Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.0023, "epssPercentile": 0.13961, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.77-99.164", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.348.3.el7uek", "fix": "ELSA-2025-20663", "url": "https://patchblox.com/security/fix/linux/elsa-2025-20663", "released": "2025-10-11T00:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.76-1", "fix": "DEBIAN-CVE-2024-26644", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26644", "released": "2024-03-26T16:15:12Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.6.15-1", "fix": "DEBIAN-CVE-2024-26644", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26644", "released": "2024-03-26T16:15:12Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.6.15-1", "fix": "DEBIAN-CVE-2024-26644", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26644", "released": "2024-03-26T16:15:12Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.77-99.164.amzn2023", "fix": "ALAS2023-2024-517", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-517", "released": "2024-02-15T02:51:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T19:12:23Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }