CVE-2024-39496

A flaw was found in the Linux kernel's btrfs zoned file system. A race condition exists during the loading of zone information when creating a block group, specifically within the btrfs_load_zone_info() function. This allows a local attacker to trigger a use-after-free vulnerability if a device replacement operation completes and frees a device while it is still being accessed. The consequence of this flaw is system instability, which can lead to a denial of service (DoS) or potentially enable arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.