ThreatCluster

Multiple CVEs Identified in btrfs Kernel Module Related to Cleaner Kthread Management

First seen 18 Feb 2026, 13:23 UTC Api.Msrc.Microsoft 34

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in the btrfs filesystem have been reported, CVE-2024-49867 and CVE-2024-57896. CVE-2024-49867, published on October 21, 2024, involves issues with stopping the cleaner kthread during unmount, while CVE-2024-57896, published on January 15, 2025, addresses flushing delalloc workers before stopping the cleaner kthread. These vulnerabilities could potentially affect systems using the btrfs filesystem.

Timeline

2024-10-21
CVE-2024-49867 published
2025-01-15
CVE-2024-57896 published
2026-02-18
Information published about both CVEs