CVE-2024-23850
kernel: btrfs_get_root_ref has an assertion failure and crash because a subvolume can be read out too soon after its root item is inserted upon subvolume creation
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 23, 2024
Updated · November 21, 2025
Description
A vulnerability was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel. An assertion failure and crash can occur when the subvolume is read out too soon after its root item is inserted upon the creation of the subvolume.
Statement
The commit which introduced this issue is not present in RHEL or its layered products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE not specified