GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-46751 (GCVE-0-2024-46751)

Vulnerability from cvelistv5 – Published: 2024-09-18 07:12 – Updated: 2026-08-05 11:38
VLAI
Title
btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
Summary
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error message.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-29 14:47 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < 9c309d2434abbe880712af7e60da9ead8b6703fe (git)
Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < d64807ded1b6054f066e03d8add6d920f3db9e5d (git)
Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < 18eb53a2734ff61b9a72c4fef5db7b38cb48ae16 (git)
Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < 3cfec712a439c5c5f5c718c5c669ee41a898f776 (git)
Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < ef9a8b73c8b60b27d9db4787e624a3438ffe8428 (git)
Affected: 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0 , < 28cb13f29faf6290597b24b728dc3100c019356f (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.31
Unaffected: 0 , < 2.6.31 (semver)
Unaffected: 5.10.238 , ≤ 5.10.* (semver)
Unaffected: 5.15.184 , ≤ 5.15.* (semver)
Unaffected: 6.1.140 , ≤ 6.1.* (semver)
Unaffected: 6.6.92 , ≤ 6.6.* (semver)
Unaffected: 6.10.10 , ≤ 6.10.* (semver)
Unaffected: 6.11 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46751",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T14:47:35.151913Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T14:47:50.614Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:31:02.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/extent-tree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9c309d2434abbe880712af7e60da9ead8b6703fe",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            },
            {
              "lessThan": "d64807ded1b6054f066e03d8add6d920f3db9e5d",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            },
            {
              "lessThan": "18eb53a2734ff61b9a72c4fef5db7b38cb48ae16",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            },
            {
              "lessThan": "3cfec712a439c5c5f5c718c5c669ee41a898f776",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            },
            {
              "lessThan": "ef9a8b73c8b60b27d9db4787e624a3438ffe8428",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            },
            {
              "lessThan": "28cb13f29faf6290597b24b728dc3100c019356f",
              "status": "affected",
              "version": "5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/extent-tree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.31"
            },
            {
              "lessThan": "2.6.31",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.184",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.140",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.92",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.238",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.184",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.140",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.92",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.10",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "2.6.31",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()\n\nInstead of doing a BUG_ON() handle the error by returning -EUCLEAN,\naborting the transaction and logging an error message."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached through a locally attached btrfs filesystem \u2014 a crafted image on a USB stick, loop-mounted file, or container/VM disk image \u2014 and then driven by ordinary local file writes or subvolume deletion. There is no network-facing consumer of btrfs_lookup_extent_info().\nAC:L - The triggering condition is a static, fully attacker-controlled on-disk value (extent item refs == 0) that the tree checker does not reject, so the crafted image deterministically hits the BUG_ON on the first COW or snapshot-delete of the affected block. No race, timing window, or memory-layout dependency is involved.\nPR:L - Once a crafted or inconsistent btrfs is mounted \u2014 routinely via desktop/kiosk automount (udisks2/systemd), shared storage, or container images \u2014 any unprivileged local user with write access drives btrfs_force_cow_block()/btrfs_drop_snapshot() into the assertion; no capability check gates the path.\nUI:N - After the filesystem is present, the attacker triggers the fault entirely through their own file writes or a subvolume delete, with no action required from any other user. Automount removes the need for a victim to explicitly mount the device.\nS:U - The crash and any resulting metadata corruption are confined to the kernel and the affected btrfs filesystem, within the same security authority. No hypervisor, IOMMU, or sandbox boundary is crossed.\nC:H - The assertion is btrfs\u0027s last line of defense before operating on an extent with broken reference bookkeeping; when it is bypassed (CONFIG_BUG=n embedded/IoT builds) update_ref_for_cow() takes the last-reference path and frees a still-referenced tree block, producing cross-linked extents that expose one file\u0027s or subvolume\u0027s data through another. The oops itself also dumps kernel registers, stack contents, and pointers to the log.\nI:H - Continuing past a zero refcount causes btrfs to free and re-allocate live metadata blocks, giving the attacker arbitrary corruption of extent-tree and file data belonging to other users on the filesystem. The oops additionally aborts a transaction mid-flight, leaving on-disk state inconsistent.\nA:H - BUG_ON() panics the kernel outright under panic_on_oops; otherwise the task is killed while still holding delayed_refs-\u003elock, head-\u003emutex, and tree locks, so every subsequent delayed-ref operation on that filesystem spins or blocks forever \u2014 an unrecoverable filesystem-wide hang and potential hard lockup, which is exactly why the fix unlocks all three before returning -EUCLEAN."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:38:21.347Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9c309d2434abbe880712af7e60da9ead8b6703fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/d64807ded1b6054f066e03d8add6d920f3db9e5d"
        },
        {
          "url": "https://git.kernel.org/stable/c/18eb53a2734ff61b9a72c4fef5db7b38cb48ae16"
        },
        {
          "url": "https://git.kernel.org/stable/c/3cfec712a439c5c5f5c718c5c669ee41a898f776"
        },
        {
          "url": "https://git.kernel.org/stable/c/ef9a8b73c8b60b27d9db4787e624a3438ffe8428"
        },
        {
          "url": "https://git.kernel.org/stable/c/28cb13f29faf6290597b24b728dc3100c019356f"
        }
      ],
      "title": "btrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46751",
    "datePublished": "2024-09-18T07:12:11.240Z",
    "dateReserved": "2024-09-11T15:12:18.268Z",
    "dateUpdated": "2026-08-05T11:38:21.347Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-46751",
      "date": "2026-09-15",
      "epss": "0.00253",
      "percentile": "0.1686"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.10.10\", \"matchCriteriaId\": \"75C6119D-9E8D-431D-813F-FE84579072CB\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()\\n\\nInstead of doing a BUG_ON() handle the error by returning -EUCLEAN,\\naborting the transaction and logging an error message.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: no realizar BUG_ON() cuando hay 0 referencias en btrfs_lookup_extent_info() En lugar de realizar un BUG_ON(), maneje el error devolviendo -EUCLEAN, cancelando la transacci\\u00f3n y registrando un mensaje de error.\"}]",
      "id": "CVE-2024-46751",
      "lastModified": "2024-09-30T12:45:56.957",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-09-18T08:15:04.010",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/28cb13f29faf6290597b24b728dc3100c019356f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/ef9a8b73c8b60b27d9db4787e624a3438ffe8428\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-46751\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-09-18T08:15:04.010\",\"lastModified\":\"2026-08-04T11:20:21.980\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()\\n\\nInstead of doing a BUG_ON() handle the error by returning -EUCLEAN,\\naborting the transaction and logging an error message.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: no realizar BUG_ON() cuando hay 0 referencias en btrfs_lookup_extent_info() En lugar de realizar un BUG_ON(), maneje el error devolviendo -EUCLEAN, cancelando la transacci\u00f3n y registrando un mensaje de error.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/btrfs/extent-tree.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"9c309d2434abbe880712af7e60da9ead8b6703fe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"d64807ded1b6054f066e03d8add6d920f3db9e5d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"18eb53a2734ff61b9a72c4fef5db7b38cb48ae16\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"3cfec712a439c5c5f5c718c5c669ee41a898f776\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"ef9a8b73c8b60b27d9db4787e624a3438ffe8428\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\",\"lessThan\":\"28cb13f29faf6290597b24b728dc3100c019356f\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/btrfs/extent-tree.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.31\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.31\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.238\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.184\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.140\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.92\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.10\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-29T14:47:35.151913Z\",\"id\":\"CVE-2024-46751\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.10.10\",\"matchCriteriaId\":\"75C6119D-9E8D-431D-813F-FE84579072CB\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/18eb53a2734ff61b9a72c4fef5db7b38cb48ae16\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/28cb13f29faf6290597b24b728dc3100c019356f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3cfec712a439c5c5f5c718c5c669ee41a898f776\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9c309d2434abbe880712af7e60da9ead8b6703fe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d64807ded1b6054f066e03d8add6d920f3db9e5d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ef9a8b73c8b60b27d9db4787e624a3438ffe8428\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T09:06:11+00:00",
      "cve": "CVE-2024-46751",
      "id": "CVE-2024-46751",
      "initial_release_date": "2024-09-18T00:00:00+00:00",
      "product_status:known_affected": "42",
      "product_status:known_not_affected": "156",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: btrfs: don\u0026#39;t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-46751.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T13:59:51Z",
      "cve": "CVE-2024-46751",
      "id": "CVE-2024-46751",
      "initial_release_date": "2024-09-19T03:10:36Z",
      "product_status:known_affected": "670",
      "product_status:known_not_affected": "29",
      "product_status:recommended": "677",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-46751",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-46751.json",
      "version": "95"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T19:31:02.648Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-46751\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-29T14:47:35.151913Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-29T14:47:39.404Z\"}}], \"cna\": {\"title\": \"btrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"9c309d2434abbe880712af7e60da9ead8b6703fe\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"d64807ded1b6054f066e03d8add6d920f3db9e5d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"18eb53a2734ff61b9a72c4fef5db7b38cb48ae16\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"3cfec712a439c5c5f5c718c5c669ee41a898f776\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"ef9a8b73c8b60b27d9db4787e624a3438ffe8428\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0\", \"lessThan\": \"28cb13f29faf6290597b24b728dc3100c019356f\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/btrfs/extent-tree.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.31\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.31\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.238\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.184\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.140\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.92\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.10\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/btrfs/extent-tree.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/9c309d2434abbe880712af7e60da9ead8b6703fe\"}, {\"url\": \"https://git.kernel.org/stable/c/d64807ded1b6054f066e03d8add6d920f3db9e5d\"}, {\"url\": \"https://git.kernel.org/stable/c/18eb53a2734ff61b9a72c4fef5db7b38cb48ae16\"}, {\"url\": \"https://git.kernel.org/stable/c/3cfec712a439c5c5f5c718c5c669ee41a898f776\"}, {\"url\": \"https://git.kernel.org/stable/c/ef9a8b73c8b60b27d9db4787e624a3438ffe8428\"}, {\"url\": \"https://git.kernel.org/stable/c/28cb13f29faf6290597b24b728dc3100c019356f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbtrfs: don\u0027t BUG_ON() when 0 reference count at btrfs_lookup_extent_info()\\n\\nInstead of doing a BUG_ON() handle the error by returning -EUCLEAN,\\naborting the transaction and logging an error message.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.238\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.184\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.140\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.92\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.10\", \"versionStartIncluding\": \"2.6.31\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"2.6.31\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:53:07.591Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-46751\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-05T10:53:07.591Z\", \"dateReserved\": \"2024-09-11T15:12:18.268Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-09-18T07:12:11.240Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.