Critical Data Leak Vulnerability in Linux Kernel: DEBIAN-CVE-2024-44972
Summary
DEBIAN-CVE-2024-44972: In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extent_write_locked_range() [BUG] For subpage + zoned case, the following workload can lead to rsv data leak at un... Affects linux versions < 6.10.6-1. Fixed in 6.10.6-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including process management, memory management, and device control. The vulnerability identified as DEBIAN-CVE-2024-44972 affects the btrfs file system within the kernel, which is known for its advanced features like snapshots and dynamic inode allocation. This vulnerability poses a risk of data leakage during unmount operations, particularly in environments utilizing subpage and zoned storage.
Vulnerability Detail
In the Linux kernel, specifically within the btrfs file system, a vulnerability has been identified where the function extent_write_locked_range() improperly handles page dirty states. This flaw can lead to a data leak of reserved space (rsv) during the unmounting process of a file system. The issue arises when certain workloads are executed, potentially exposing sensitive data to unauthorized access. The vulnerability is triggered under specific conditions involving subpage and zoned storage configurations, which can result in warnings during the unmount process, indicating a risk of data exposure.
How To Fix
Minimum fixed version
6.10.6-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid unmounting the file system under conditions that trigger the vulnerability. This may involve ensuring that workloads that could lead to data leaks are not executed before unmounting.
Conclusion
The DEBIAN-CVE-2024-44972 vulnerability in the Linux kernel poses a significant risk of data leakage during file system unmount operations. Users are strongly advised to update to the patched version to mitigate this risk. For those unable to update immediately, implementing workarounds can help reduce exposure until a proper fix is applied.
See every vulnerability recorded for linux →
FAQ
It is a vulnerability in the Linux kernel affecting the btrfs file system, which can lead to data leaks during unmount operations.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
If exploited, this vulnerability could lead to unauthorized access to sensitive data, potentially compromising the integrity and confidentiality of the system.
Yes, the patched version of the Linux kernel is 6.10.6-1 for both Debian 13 and Debian 14.
As a temporary measure, avoid unmounting the file system under conditions that could trigger the vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
