CVE-2024-35935: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35935 affects the Linux kernel's btrfs module, specifically in the send functionality. The vulnerability was discovered on May 19, 2024, and involves a path reference underflow issue in the iterate_inode_ref() function. The vulnerability affects various Linux kernel versions and distributions including Ubuntu, Debian, and other Linux-based systems (NVD).

The vulnerability exists in the btrfs send module where a BUG_ON condition was used to handle path buffer failures. The issue occurs specifically in the iterate_inode_ref() function where improper error handling could potentially leak kernel addresses. The fix involves replacing the BUG_ON condition with proper error handling to prevent the buffer underflow and potential information disclosure (Kernel Commit).

If exploited, this vulnerability could lead to information disclosure by potentially leaking kernel addresses when the path buffer build fails. This could provide attackers with valuable information about the kernel's memory layout (NVD).

The vulnerability requires access to a system with the btrfs filesystem and the ability to trigger the path buffer build failure condition in the send operation. No known exploits in the wild have been reported at the time of assessment (CVE).

The issue has been fixed in various Linux distributions through kernel updates. Ubuntu has released fixes for multiple versions including 24.04 LTS (6.8.0-38.38), 22.04 LTS (5.15.0-116.126), and 20.04 LTS (5.4.0-189.209). Debian has also released fixes in versions 5.10.234-1 for bullseye and 6.1.128-1 for bookworm (Ubuntu, Debian).