Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2024-0775

Опубликовано: 05 мая 2023
Источник: redhat
CVSS3: 6.7

Описание

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelWill not fix
Red Hat Enterprise Linux 9kernel-rtWill not fix

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-416
https://bugzilla.redhat.com/show_bug.cgi?id=2259414kernel: use-after-free while changing the mount option in __ext4_remount leading

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.7
ubuntu
около 2 лет назад

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

CVSS3: 6.7
nvd
около 2 лет назад

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.

CVSS3: 7.1
msrc
около 2 лет назад

Kernel: use-after-free while changing the mount option in __ext4_remount leading

CVSS3: 6.7
debian
около 2 лет назад

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super ...

suse-cvrf
почти 2 года назад

Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5)

6.7 Medium

CVSS3

Уязвимость CVE-2024-0775