CVE-2024-49869

CVE-2024-49869 is a buffer overflow vulnerability in the Btrfs file system's send functionality within the Linux kernel. Specifically, it involves incorrect buffer overflow detection when copying paths to cache entries, affecting Linux kernel versions that include commit c0247d289e73. This vulnerability has a CVSS score of 7.8 (High), indicating that a local attacker with low privileges can achieve high confidentiality, integrity, and availability impacts. The issue stems from a mismatch between the declared array length and the actual data copied, leading to a fortified kernel reporting a buffer overflow. Currently, there is no evidence of active exploitation, nor are there publicly available Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.