Threats tagged 'ghsa-6pw8-39hw-qcp8'

CVE-2024-49868 is a medium severity vulnerability in the Linux kernel's Btrfs filesystem that causes a NULL pointer dereference when failing to start a new transaction. This occurs due to improper handling of a NULL fs_info->reloc_ctl pointer during error cleanup in the balance operation, leading to a general protection fault and potential kernel crash. The issue arises specifically in the btrfs_update_reloc_root() function when it accesses fs_info->reloc_ctl without verifying it is non-NULL. The vulnerability has been fixed by adding a NULL check before accessing this pointer.