oss-sec mailing list archives

Re: CVE-2024-50217: Linux kernel: btrfs: Use-after-free of block device file in __btrfs_free_extra_devids()


From: Demi Marie Obenour <demiobenour () gmail com>
Date: Thu, 10 Apr 2025 17:51:36 -0400

On 4/10/25 8:22 AM, akendo () akendo eu wrote:
Hey everyone,

Not too sure how or whom to ask about: But I saw that there is CVE-2024-50217 that affects every kernel since 4.8.

However, it is only fixed on more recent version of the linux kernel like 6.11 or 6.12. Any reason this wasn’t 
backported to older kernel versions?
Linux kernel patch backporting is best effort, sadly.
-- 
Sincerely,
Demi Marie Obenour (she/her/hers)


Current thread: