CVE-2024-0775: Kernel: use-after-free while changing the mount option in __ext4_remount leading
A use-after-free flaw was found in the ext4remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.
Other sources
If there are failures while changing the mount options in ext4remount(), we need to restore the old mount options, there is a chance that we will free the old quota file names before a potential failure leading to a use-after-free.
Also, if there is a failed read/write to read-only transition, if the quota has already been suspended, we need to renable quota handling.
Refer: https://scm.linefinity.com/common/linux-stable/commit/4c0b4818b1f636bc96359f7817a2d8bab6370162
— Red Hat
Kernel: use-after-free while changing the mount option in ext4remount leading
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/Kernelto a version that resolves this vulnerability.Fixed in 6.4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0775?
CVE-2024-0775 is classified as a moderate severity vulnerability due to its potential for information leak.
How do I fix CVE-2024-0775?
To fix CVE-2024-0775, update the Linux kernel to version 6.4 or higher, or apply the specified patches for affected versions.
Who is affected by CVE-2024-0775?
CVE-2024-0775 affects local users running specific versions of the Linux kernel, particularly prior to version 6.4.
What types of systems are vulnerable to CVE-2024-0775?
Systems running the ext4 filesystem in affected versions of the Linux kernel are vulnerable to CVE-2024-0775.
Can CVE-2024-0775 lead to remote exploitation?
CVE-2024-0775 is a local vulnerability and does not allow for remote exploitation by adversaries.