What’s Vulnerable › Vulnerabilities

CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-18 · updated 2026-06-17
• Weakness: CWE-617

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() we BUG_ON(ret) from btrfs_dec_ref(). This is incorrect, we have proper error handling here, return the error.

Affected products

• Linux kernel: before 5.10.236; from 5.11 before 5.15.180; from 5.16 before 6.1.134; from 6.2 before 6.6.87; from 6.7 before 6.10.10 — fixed in 5.10.236, 5.15.180, 6.1.134, 6.10.10, 6.6.87

How to fix

Upgrade to a fixed version: Linux kernel 5.10.236, 5.15.180, 6.1.134, 6.10.10. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0e4840ae09f375381167000ce47424818fcbcc7c
• https://git.kernel.org/stable/c/2c4fe45351e544da4b8f10c74b277117a4fa7869
• https://git.kernel.org/stable/c/5eb178f373b4f16f3b42d55ff88fc94dd95b93b1
• https://git.kernel.org/stable/c/67e4ca7ddc67ef949326b4dc404a9678bbe67d72
• https://git.kernel.org/stable/c/9c8237021b53d52357c0de07a768582fafb2791d
• https://git.kernel.org/stable/c/a7f16a7a709845855cb5a0e080a52bda5873f9de
• https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Get alerted when CVE-2024-46753 or the next vulnerability affects your stack