Kernel: use-after-free while changing the mount option in __ext4_remount leading
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | kernel | unaffected |
|
|||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 8 | unaffected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 8 | unaffected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | |||||||||||||||||||||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — |
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
No data available yet.
Vendor Workaround
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-16563 | A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free. |
Ubuntu USN |
USN-6700-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6700-2 | Linux kernel (AWS) vulnerabilities |
Ubuntu USN |
USN-6701-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6701-2 | Linux kernel (GCP) vulnerabilities |
Ubuntu USN |
USN-6701-3 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6701-4 | Linux kernel (Azure) vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.225% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|