Threats tagged 'ghsa-6574-vqv8-9334'

CVE-2024-56759 is a high-severity use-after-free vulnerability in the Linux kernel's Btrfs filesystem. It occurs when a tree block is copy-on-written (COW) with tracing enabled and kernel preemption active, leading to a potential use-after-free condition in the extent buffer during tracepoint execution. The flaw arises because the last reference to the extent buffer may be dropped before the tracepoint is called, causing the buffer to be freed prematurely. The issue has been fixed by relocating the tracepoint call to ensure it occurs before the extent buffer is freed.