What’s Vulnerable › Vulnerabilities

CVE-2024-46751: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-18 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error message.

Affected products

• Linux kernel: before 6.10.10 — fixed in 6.10.10

How to fix

Upgrade to a fixed version: Linux kernel 6.10.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/18eb53a2734ff61b9a72c4fef5db7b38cb48ae16
• https://git.kernel.org/stable/c/28cb13f29faf6290597b24b728dc3100c019356f
• https://git.kernel.org/stable/c/3cfec712a439c5c5f5c718c5c669ee41a898f776
• https://git.kernel.org/stable/c/9c309d2434abbe880712af7e60da9ead8b6703fe
• https://git.kernel.org/stable/c/d64807ded1b6054f066e03d8add6d920f3db9e5d
• https://git.kernel.org/stable/c/ef9a8b73c8b60b27d9db4787e624a3438ffe8428
• https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

Get alerted when CVE-2024-46751 or the next vulnerability affects your stack