CVE-2024-46751: linux
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-46751DEBIAN-CVE-2024-46751
Published 18-09-2024Last modified 05-08-2026
Vulnerability summary
CVE-2024-46751 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.26%
0%100%
Low · +0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 28 · Related 25DLA-4271-1DLA-4327-1DSA-5925-1SUSE-SU-2024:3551-1SUSE-SU-2024:3553-1SUSE-SU-2024:3561-1SUSE-SU-2024:3564-1SUSE-SU-2024:3569-1SUSE-SU-2024:3587-1SUSE-SU-2024:3592-1SUSE-SU-2025:01983-1SUSE-SU-2025:20073-1SUSE-SU-2025:20077-1USN-7154-1USN-7154-2USN-7155-1USN-7156-1USN-7196-1USN-7654-1USN-7654-2USN-7654-3USN-7654-4USN-7654-5USN-7655-1USN-7686-1USN-7711-1USN-7712-1USN-7712-2
Timeline
- 18-09-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error message.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSources4 sources · 5.5–7.8
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.26%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
+0.01 pp
From 0.25% on 18-09-2026
18-09-202618-10-2026
EPSS score0.26%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu130 products
- linuxAll versions (No fix recorded) | < 5.15.0-144.157 | < 6.8.0-50.51
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1088.95 | < 6.8.0-1020.22
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < 9c309d2434abbe880712af7e60da9ead8b6703fe | ≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < d64807ded1b6054f066e03d8add6d920f3db9e5d | ≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < 18eb53a2734ff61b9a72c4fef5db7b38cb48ae16 | ≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < 3cfec712a439c5c5f5c718c5c669ee41a898f776 | ≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < ef9a8b73c8b60b27d9db4787e624a3438ffe8428 | ≥ 5d4f98a28c7d334091c1b7744f48a1acdd2a4ae0, < 28cb13f29faf6290597b24b728dc3100c019356f | 2.6.31
- linux_kernel< 6.10.10
Debian1 product
- linux< 6.1.140-1 | < 6.10.11-1
3 vendors · 133 products