Improper locking in Linux kernel - CVE-2024-26726

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU90791

Improper locking in Linux kernel - CVE-2024-26726

Published: June 3, 2024 / Updated: May 14, 2025


Vulnerability identifier: #VU90791
CSH Severity: Low
CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-26726
CWE-ID: CWE-667
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the clear_extent_uptodate() function in fs/btrfs/inode.c. A local user can perform a denial of service (DoS) attack.


Affected software

Linux kernel
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Real Time Module
Public Cloud Module
SUSE Linux Enterprise Live Patching
openSUSE Leap
openEuler
Ubuntu
IBM API Connect
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource
kernel-livepatch-6_4_0-150600_10_5-rt
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo
perf
kernel
bpftool
kernel-debugsource
kernel-tools
python2-perf-debuginfo
python2-perf
python3-perf
kernel-tools-devel
kernel-devel
bpftool-debuginfo
python3-perf-debuginfo
perf-debuginfo
kernel-debuginfo
kernel-source
kernel-tools-debuginfo
kernel-headers
linux-aws-fips (Ubuntu package)
linux (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-kvm (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux (Debian package)
kernel-syms-azure
kernel-azure-vdso
kernel-devel-azure
kernel-source-azure
kernel-azure-vdso-debuginfo
kernel-azure
kernel-azure-optional-debuginfo
kselftests-kmp-azure
kernel-azure-devel
kernel-azure-debugsource
reiserfs-kmp-azure-debuginfo
reiserfs-kmp-azure
ocfs2-kmp-azure
kernel-azure-livepatch-devel
cluster-md-kmp-azure
gfs2-kmp-azure-debuginfo
kernel-azure-devel-debuginfo
cluster-md-kmp-azure-debuginfo
kselftests-kmp-azure-debuginfo
gfs2-kmp-azure
kernel-azure-optional
dlm-kmp-azure
dlm-kmp-azure-debuginfo
kernel-azure-extra-debuginfo
kernel-azure-debuginfo
kernel-azure-extra
ocfs2-kmp-azure-debuginfo
kernel-rt-extra
dlm-kmp-rt-debuginfo
kernel-rt-debugsource
kernel-syms-rt
kernel-rt-optional
ocfs2-kmp-rt-debuginfo
kernel-devel-rt
kernel-source-rt
kernel-rt_debug
kernel-rt
kernel-rt-extra-debuginfo
kernel-rt-optional-debuginfo
gfs2-kmp-rt
kernel-rt-debuginfo
kernel-rt_debug-livepatch-devel
reiserfs-kmp-rt
cluster-md-kmp-rt
kernel-rt_debug-devel
reiserfs-kmp-rt-debuginfo
kernel-rt_debug-debugsource
cluster-md-kmp-rt-debuginfo
kselftests-kmp-rt-debuginfo
kernel-rt_debug-vdso
kernel-rt-vdso
kernel-rt-devel-debuginfo
gfs2-kmp-rt-debuginfo
kernel-rt-devel
kernel-rt-vdso-debuginfo
kernel-rt_debug-devel-debuginfo
ocfs2-kmp-rt
kselftests-kmp-rt
kernel-rt_debug-debuginfo
kernel-rt_debug-vdso-debuginfo
kernel-rt-livepatch-devel
dlm-kmp-rt
linux-image-generic-lpae (Ubuntu package)
linux-image-6.5.0-44-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-6.5.0-44-generic (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-44-lowlatency-64k (Ubuntu package)
linux-image-6.5.0-44-lowlatency (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.5.0-1017-starfive (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-6.5.0-1020-raspi (Ubuntu package)
linux-image-6.5.0-1023-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-6.5.0-1023-nvidia-64k (Ubuntu package)
linux-image-6.5.0-1023-nvidia (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-6.5 (Ubuntu package)
linux-image-nvidia-64k-6.5 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-1024-azure (Ubuntu package)
linux-image-6.5.0-1024-azure-fde (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-6.5.0-1024-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-6.5.0-1026-oracle-64k (Ubuntu package)
linux-image-6.5.0-1026-oracle (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.5.0-1027-oem (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-oem-22.04d (Ubuntu package)
IBM Qradar SIEM
IBM Security Guardium

How to mitigate CVE-2024-26726

Install update from vendor's website.

Linux kernel - addressed in versions 6.1.79, 6.6.18, 6.7.6, 6.8
IBM API Connect - update to 10.0.8.5
kernel-livepatch-SLE15-SP6-RT_Update_1-debugsource - update to 1-150600.1.5.1
kernel-livepatch-6_4_0-150600_10_5-rt - update to 1-150600.1.5.1
kernel-livepatch-6_4_0-150600_10_5-rt-debuginfo - update to 1-150600.1.5.1
perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
bpftool - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165
kernel-debugsource - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-tools - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
python2-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python2-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python3-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-tools-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
bpftool-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165
python3-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-source - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-tools-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276, 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
kernel-headers - addressed in versions 5.10.0-60.138.0.165, 5.10.0-136.76.0.156, 5.10.0-153.55.0.133, 5.10.0-199.0.0.112
linux-aws-fips (Ubuntu package) - addressed in versions 5.15.0.156.89, 5.15.0-156.166+fips1, 5.15.0.1092.82, 5.15.0.1092.88, 5.15.0-1092.99+fips1, 5.15.0-1092.101+fips1
linux (Ubuntu package) - addressed in versions 5.15.0.156.135, 5.15.0.156.154, 5.15.0-156.166, 5.15.0.156.166~20.04.1, 5.15.0-156.166~20.04.1, 5.15.0.1045.45, 5.15.0-1045.45, 5.15.0.1045.45~20.04.1, 5.15.0-1045.45~20.04.1, 5.15.0.1056.59, 5.15.0-1056.60, 5.15.0.1075.74, 5.15.0-1075.83, 5.15.0.1086.82, 5.15.0.1086.84, 5.15.0-1086.89, 5.15.0.1086.89~20.04.1, 5.15.0-1086.89~20.04.1, 5.15.0.1087.87, 5.15.0-1087.88, 5.15.0-1087.91~20.04.1, 5.15.0.1087.91~20.04.1, 5.15.0-1087.93, 5.15.0.1087.93~20.04.1, 5.15.0-1087.93~20.04.1, 5.15.0.1089.88, 5.15.0-1089.95, 5.15.0.1090.86, 5.15.0-1090.96, 5.15.0.1092.88, 5.15.0.1092.95, 5.15.0-1092.99, 5.15.0-1092.99~20.04.1, 5.15.0.1092.99~20.04.1, 5.15.0-1092.101, 5.15.0-1092.101~20.04.1, 5.15.0.1092.101~20.04.1
linux-nvidia-tegra-igx (Ubuntu package) - addressed in versions 5.15.0-1034.34, 5.15.0.1034.36
linux-intel-iot-realtime (Ubuntu package) - addressed in versions 5.15.0-1085.87, 5.15.0.1085.89, 5.15.0.1092.96, 5.15.0-1092.101
linux-kvm (Ubuntu package) - addressed in versions 5.15.0.1088.84, 5.15.0-1088.93
linux-oracle-5.15 (Ubuntu package) - addressed in versions 5.15.0-1090.96~20.04.1, 5.15.0.1090.96~20.04.1
linux-azure-fips (Ubuntu package) - addressed in versions 5.15.0.1096.81, 5.15.0-1096.105+fips1
linux-azure (Ubuntu package) - addressed in versions 5.15.0.1096.94, 5.15.0-1096.105
linux-azure-5.15 (Ubuntu package) - addressed in versions 5.15.0-1096.105~20.04.1, 5.15.0.1096.105~20.04.1
linux (Debian package) - update to 6.1.85-1
kernel-syms-azure - update to 6.4.0-150600.8.5.1
kernel-azure-vdso - update to 6.4.0-150600.8.5.4
kernel-devel-azure - update to 6.4.0-150600.8.5.4
kernel-source-azure - update to 6.4.0-150600.8.5.4
kernel-azure-vdso-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure - update to 6.4.0-150600.8.5.4
kernel-azure-optional-debuginfo - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-devel - update to 6.4.0-150600.8.5.4
kernel-azure-debugsource - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
reiserfs-kmp-azure - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-livepatch-devel - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure - update to 6.4.0-150600.8.5.4
gfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-devel-debuginfo - update to 6.4.0-150600.8.5.4
cluster-md-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kselftests-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
gfs2-kmp-azure - update to 6.4.0-150600.8.5.4
kernel-azure-optional - update to 6.4.0-150600.8.5.4
dlm-kmp-azure - update to 6.4.0-150600.8.5.4
dlm-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-extra-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-azure-extra - update to 6.4.0-150600.8.5.4
ocfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.5.4
kernel-rt-extra - update to 6.4.0-150600.10.5.1
dlm-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-debugsource - update to 6.4.0-150600.10.5.1
kernel-syms-rt - update to 6.4.0-150600.10.5.1
kernel-rt-optional - update to 6.4.0-150600.10.5.1
ocfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-devel-rt - update to 6.4.0-150600.10.5.1
kernel-source-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug - update to 6.4.0-150600.10.5.1
kernel-rt - update to 6.4.0-150600.10.5.1
kernel-rt-extra-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-optional-debuginfo - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-livepatch-devel - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-devel - update to 6.4.0-150600.10.5.1
reiserfs-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debugsource - update to 6.4.0-150600.10.5.1
cluster-md-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso - update to 6.4.0-150600.10.5.1
kernel-rt-vdso - update to 6.4.0-150600.10.5.1
kernel-rt-devel-debuginfo - update to 6.4.0-150600.10.5.1
gfs2-kmp-rt-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-devel - update to 6.4.0-150600.10.5.1
kernel-rt-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-devel-debuginfo - update to 6.4.0-150600.10.5.1
ocfs2-kmp-rt - update to 6.4.0-150600.10.5.1
kselftests-kmp-rt - update to 6.4.0-150600.10.5.1
kernel-rt_debug-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt_debug-vdso-debuginfo - update to 6.4.0-150600.10.5.1
kernel-rt-livepatch-devel - update to 6.4.0-150600.10.5.1
dlm-kmp-rt - update to 6.4.0-150600.10.5.1
linux-image-generic-lpae (Ubuntu package) - update to 6.5.0.44.44
linux-image-6.5.0-44-generic-64k (Ubuntu package) - addressed in versions 6.5.0-44.44, 6.5.0-44.44~22.04.1
linux-image-generic (Ubuntu package) - update to 6.5.0.44.44
linux-image-virtual-hwe-22.04 (Ubuntu package) - addressed in versions 6.5.0.44.44, 6.5.0.44.44~22.04.1
linux-image-virtual (Ubuntu package) - update to 6.5.0.44.44
linux-image-kvm (Ubuntu package) - update to 6.5.0.44.44
linux-image-6.5.0-44-generic (Ubuntu package) - addressed in versions 6.5.0-44.44, 6.5.0-44.44~22.04.1
linux-image-generic-64k (Ubuntu package) - update to 6.5.0.44.44
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44.1~22.04.1
linux-image-6.5.0-44-lowlatency-64k (Ubuntu package) - update to 6.5.0-44.44.1~22.04.1
linux-image-6.5.0-44-lowlatency (Ubuntu package) - update to 6.5.0-44.44.1~22.04.1
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44.1~22.04.1
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44~22.04.1
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44~22.04.1
linux-image-starfive (Ubuntu package) - update to 6.5.0.1017.18~22.04.1
linux-image-6.5.0-1017-starfive (Ubuntu package) - update to 6.5.0-1017.18~22.04.1
linux-image-raspi-nolpae (Ubuntu package) - update to 6.5.0.1020.21
linux-image-raspi (Ubuntu package) - update to 6.5.0.1020.21
linux-image-6.5.0-1020-raspi (Ubuntu package) - update to 6.5.0-1020.23
linux-image-6.5.0-1023-aws (Ubuntu package) - update to 6.5.0-1023.23~22.04.1
linux-image-aws (Ubuntu package) - update to 6.5.0.1023.23~22.04.1
linux-image-6.5.0-1023-nvidia-64k (Ubuntu package) - update to 6.5.0-1023.24
linux-image-6.5.0-1023-nvidia (Ubuntu package) - update to 6.5.0-1023.24
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-6.5 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-64k-6.5 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-6.5.0-1024-azure (Ubuntu package) - update to 6.5.0-1024.25~22.04.1
linux-image-6.5.0-1024-azure-fde (Ubuntu package) - update to 6.5.0-1024.25~22.04.1
linux-image-azure (Ubuntu package) - update to 6.5.0.1024.25~22.04.1
linux-image-azure-fde (Ubuntu package) - update to 6.5.0.1024.25~22.04.1
linux-image-6.5.0-1024-gcp (Ubuntu package) - addressed in versions 6.5.0-1024.26, 6.5.0-1024.26~22.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 6.5.0.1024.26, 6.5.0.1024.26~22.04.1
linux-image-oracle (Ubuntu package) - update to 6.5.0.1026.26~22.04.1
linux-image-6.5.0-1026-oracle-64k (Ubuntu package) - update to 6.5.0-1026.26~22.04.1
linux-image-6.5.0-1026-oracle (Ubuntu package) - update to 6.5.0-1026.26~22.04.1
linux-image-oracle-64k (Ubuntu package) - update to 6.5.0.1026.26~22.04.1
linux-image-6.5.0-1027-oem (Ubuntu package) - update to 6.5.0-1027.28
linux-image-oem-22.04 (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04a (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04b (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04c (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04d (Ubuntu package) - update to 6.5.0.1027.29
IBM Qradar SIEM - update to 7.5.0 Update Pack 10 IF01
IBM Security Guardium - update to 12.0p30

External References

Related Security Bulletins