CVE-2024-0775

Kernel: use-after-free while changing the mount option in __ext4_remount leading

Published Jan 22, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-16563 A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.
Ubuntu USN Ubuntu USN USN-6700-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6700-2 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-6701-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6701-2 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-6701-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6701-4 Linux kernel (Azure) vulnerabilities
History
Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
cpe:/a:redhat:enterprise_linux:8
cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Nov 5, 2026, 11:39 AM
Reserved
Jan 21, 2024, 12:37 PM
Status
Modified
Published
Jan 22, 2024, 1:15 PM
Modified
Nov 5, 2026, 12:17 PM
Severity
Moderate
Public date
May 5, 2023, 12:00 AM