In the Linux kernel, the following vulnerability has been resolved:
btrfs: send: handle path ref underflow in header iterateinoderef()
Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1363ed8867b81ea169fba2ccc14af96a85ed183",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-1385ab1a",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ae356c627b493323e1433dcb27a26917668c07c",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-2bfe8989",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ae356c627b493323e1433dcb27a26917668c07c",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-33ccaa12",
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03938619a1e718b6168ae4528e1b0f979293f1a5",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-37f50049",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@024529c27c8b4b273325a169e078337c8279e229",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-43e02f01",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4720d590c4cb5d9ffa0060b89743651cc7e995f9",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-4ea43b89",
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@024529c27c8b4b273325a169e078337c8279e229",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-6faaa555",
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4720d590c4cb5d9ffa0060b89743651cc7e995f9",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-8a51595b",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6ee34c6f9cd12802326da26631232a61743501",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-b242b5a2",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be2b6bcc936ae17f42fff6494106a5660b35d8d3",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-bc7392ec",
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03938619a1e718b6168ae4528e1b0f979293f1a5",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-cadb9c40",
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-cd268356",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be2b6bcc936ae17f42fff6494106a5660b35d8d3",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-d9c2e017",
"digest": {
"line_hashes": [
"114179893460394693282290919318237872804",
"41090533936225525302009557449746296121",
"9697478943559541576491122785197841208",
"248364360162028432164306245047290951579"
],
"threshold": 0.9
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6ee34c6f9cd12802326da26631232a61743501",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-e07472c2",
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1363ed8867b81ea169fba2ccc14af96a85ed183",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-f34dbb92",
"digest": {
"length": 1962.0,
"function_hash": "110142863319661026322252655282186065951"
},
"deprecated": false
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330a",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"function": "iterate_inode_ref",
"file": "fs/btrfs/send.c"
},
"id": "CVE-2024-35935-fadb5403",
"digest": {
"length": 2001.0,
"function_hash": "156006787979632121343773236291679325297"
},
"deprecated": false
}
]