CVE-2024-49967

kernel: ext4: no need to continue when the number of entries is 1

Published Oct 21, 2024 CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Products

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-570.12.1.el9_6	cpe:/a:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z
kernel-0:5.14.0-570.12.1.el9_6	cpe:/o:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4008-1	linux-6.1 security update
Ubuntu USN	USN-7166-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7166-2	Linux kernel (AWS) vulnerabilities
Ubuntu USN	USN-7166-3	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-7167-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-2	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-7170-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-7173-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7173-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7166-4	Linux kernel (Xilinx ZynqMP) vulnerabilities
Ubuntu USN	USN-7167-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-3	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-4	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7169-5	Linux kernel (Real-time) vulnerabilities
Ubuntu USN	USN-7173-3	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-7183-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7184-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7185-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7185-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7186-1	Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN	USN-7186-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7194-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7195-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7195-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7196-1	Linux kernel (Azure) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024102133-CVE-2024-49967-a58a@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-49967
https://www.cve.org/CVERecord?id=CVE-2024-49967

History

May 14, 2025 2:30 AM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux

Feb 13, 2025 12:45 AM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-99
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}`

Jan 7, 2025 9:30 AM Weaknesses updated. Affected versions updated. Affected vendors updated. References updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses	NVD-CWE-noinfo
CPEs	cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products	Linux Linux linux Kernel
References	https://git.kernel.org/stable/c/133ff0d78f1b160de011647bb65807195ca5d1ca https://git.kernel.org/stable/c/1a00a393d6a7fb1e745a41edd09019bd6a0ad64c https://git.kernel.org/stable/c/2d64e7dada22ab589d1ac216a3661074d027f25e https://git.kernel.org/stable/c/64c8c484242b141998f7408596ddb2dc6da4b1d3 https://git.kernel.org/stable/c/9d4b2e4c36bb88d57018c1cbc8b6a0c4b44a7f42 https://git.kernel.org/stable/c/a02d7f5b24193aed451ac67aad3453472e79dc78 https://git.kernel.org/stable/c/aca593e6070e21979430c344e9cb0b272a9e7e10 https://git.kernel.org/stable/c/cdfd6ef391df332c9abb854f4530dd7bfbd71dc4 https://git.kernel.org/stable/c/fe192515d2937b8ed2d21921b558a06dd2031d21
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Jan 7, 2025 9:15 AM Title updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Title	ext4: no need to continue when the number of entries is 1	kernel: ext4: no need to continue when the number of entries is 1
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jan 7, 2025 9:00 AM Description updated View changes

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the number of entries is 1	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Nov 8, 2024 4:00 PM Added references View changes

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/64c8c484242b141998f7408596ddb2dc6da4b1d3 https://git.kernel.org/stable/c/cdfd6ef391df332c9abb854f4530dd7bfbd71dc4

Nov 1, 2024 3:30 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Oct 23, 2024 1:30 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2024102133-CVE-2024-49967-a58a@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-49967 https://www.cve.org/CVERecord?id=CVE-2024-49967
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Oct 22, 2024 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Oct 21, 2024 6:15 PM Description updated. Title updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the number of entries is 1
Title		ext4: no need to continue when the number of entries is 1
References		https://git.kernel.org/stable/c/133ff0d78f1b160de011647bb65807195ca5d1ca https://git.kernel.org/stable/c/1a00a393d6a7fb1e745a41edd09019bd6a0ad64c https://git.kernel.org/stable/c/2d64e7dada22ab589d1ac216a3661074d027f25e https://git.kernel.org/stable/c/9d4b2e4c36bb88d57018c1cbc8b6a0c4b44a7f42 https://git.kernel.org/stable/c/a02d7f5b24193aed451ac67aad3453472e79dc78 https://git.kernel.org/stable/c/aca593e6070e21979430c344e9cb0b272a9e7e10 https://git.kernel.org/stable/c/fe192515d2937b8ed2d21921b558a06dd2031d21