CVE-2024-49884

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ================================================================== BUG: KASAN: slab-use-after-free in ext4_split_extent_at+0xba8/0xcc0 Read of size 2 at addr ffff88810548ed08 by task kworker/u20:0/40 CPU: 0 PID: 40 Comm: kworker/u20:0 Not tainted 6.9.0-dirty #724 Call Trace: <TASK> kasan_report+0x93/0xc0 ext4_split_extent_at+0xba8/0xcc0 ext4_split_extent.isra.0+0x18f/0x500 ext4_split_convert_extents+0x275/0x750 ext4_ext_handle_unwri...

Affected product and versions

Product

Linux Linux, debian linux, linux kernel

Affected versions

>= dfe5080939ea4686b3414b5d970a9b26733c57a4 < 393a46f60ea4f249dc9d496d4eb2d542f5e11ade, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < 448100a29395b0c8b4c42967155849fe0fbe808f, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < e52f933598b781d291b9297e39c463536da0e185, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < cafcc1bd62934547c76abf46c6d0d54f135006fe, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < a5401d4c3e2a3d25643c567d26e6de327774a2c9, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < 8fe117790b37c84c651e2bad9efc0e7fda73c0e3, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < 5d949ea75bb529ea6342e83465938a3b0ac51238, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < 915ac3630488af0ca194dc63b86d99802b4f6e18, >= dfe5080939ea4686b3414b5d970a9b26733c57a4 < c26ab35702f8cd0cdc78f96aa5856bfb77be798f, >= 3.18, 11.0, >= 3.18 < 4.19.323, >= 4.20 < 5.4.290, >= 5.5 < 5.10.227, >= 5.11 < 5.15.168, >= 5.16 < 6.1.113, >= 6.2 < 6.6.55, >= 6.7 < 6.10.14, >= 6.11 < 6.11.3

Fixed versions

4.19.323, 5.4.290, 5.10.227, 5.15.168, 6.1.113, 6.6.55, 6.10.14, 6.11.3

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416