CVE-2024-26791: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26791 affects the Linux kernel's btrfs filesystem device replacement functionality. The vulnerability was discovered when a syzbot report identified that device name buffers passed to device replace were not properly checked for string termination, which could lead to a read out of bounds in getname_kernel(). This issue was disclosed on April 4, 2024, and affects Linux kernel versions up to (excluding) 4.19.309, 5.4.271, 5.10.212, 5.15.151, and various other versions (NVD).

The vulnerability exists in the btrfs device replacement functionality where device name buffers lack proper validation for string termination. The issue has been assigned a CVSS v3.1 base score of 7.1 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. The vulnerability is classified as CWE-125 (Out-of-bounds Read) (NVD).

The vulnerability could allow an attacker to perform an out-of-bounds read in the getname_kernel() function, potentially leading to information disclosure or system crashes. The attack requires local access and low privileges to exploit (NVD).

The vulnerability requires local access with low privileges to exploit. It was initially discovered through syzbot testing and has been confirmed with a proof-of-concept test case (Kernel Patch).

The issue has been fixed by adding a helper function that validates both source and target device name buffers. For device ID as the source, the buffer is initialized to an empty string. The fix has been implemented in various kernel versions and is available through distribution updates (Ubuntu Security, Debian LTS).