VYPR
← All advisories
Medium severity5.5NVD Advisory· Published May 19, 2024· Updated May 12, 2026

CVE-2024-35936

CVE-2024-35936

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()

The unhandled case in btrfs_relocate_sys_chunks() loop is a corruption, as it could be caused only by two impossible conditions:

- at first the search key is set up to look for a chunk tree item, with offset -1, this is an inexact search and the key->offset will contain the correct offset upon a successful search, a valid chunk tree item cannot have an offset -1

- after first successful search, the found_key corresponds to a chunk item, the offset is decremented by 1 before the next loop, it's impossible to find a chunk item there due to alignment and size constraints

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A missing error check in the Linux kernel's Btrfs chunk tree lookup can cause a crash (NULL deref) when relocating system chunks on corrupted filesystems.

Mitigation

Linux kernel stable releases have backported the fix (commit 1f9212cdbd00 and others) [2]. Users should update their kernel to a version containing the patch. The CVE has been assigned a CVSS v3 base score of 5.5 (Medium). Siemens has reported that some of their products, such as the SIMATIC S7-1500 TM MFP GNU/Linux subsystem, are affected and recommends applying updates from their security advisory SSA-265688 [1].

References
  1. SSA-265688
  2. Making sure you're not a bot!

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

119

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.