CVE-2024-0775CWE-416

CVE-2024-0775

Medium · published January 22, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
12.4
In the wild
Unconfirmed
What it is

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.4th percentile
Weakness
CWE-416 · Use After Free
Published
2024-01-22T18:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel< 6.46.4
linux/linux_kernelall versions—
redhat/enterprise_linuxall versions—
References (6)
https://access.redhat.com/security/cve/CVE-2024-0775 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2259414 · [email protected]https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162 · [email protected]https://access.redhat.com/security/cve/CVE-2024-0775 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2259414 · af854a3a-2127-422b-91ae-364da2661108https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 22 JAN 13:03Z
    Kernel: use-after-free while changing the mount option in __ext4_remount leading
    cvelistv5