CVE-2024-49884: ext4: fix slab-use-after-free in ext4_split_extent_at()

Q: What is the severity of CVE-2024-49884?

CVE-2024-49884 is classified as a high-severity vulnerability in the Linux kernel due to a use-after-free issue.

Q: How do I fix CVE-2024-49884?

To fix CVE-2024-49884, update your Linux kernel to a version that includes the patch, such as 6.1.123-1 or 6.12.11-1.

Q: Which versions of the Linux kernel are affected by CVE-2024-49884?

CVE-2024-49884 affects Linux kernel versions between 3.18 and 5.10.227, as well as various versions up to 6.11.3.

Q: Is CVE-2024-49884 exploitable?

Yes, CVE-2024-49884 can be potentially exploited by attackers to corrupt memory, leading to privilege escalation or denial of service.

Q: What does the term 'use-after-free' mean in the context of CVE-2024-49884?

In the context of CVE-2024-49884, 'use-after-free' refers to accessing memory after it has been freed, which can lead to unstable system behavior or security vulnerabilities.

Published Oct 21, 2024

Updated

ext4: fix slab-use-after-free in ext4splitextentat()

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

221 affected componentsFixes available

Linux Linux kernel>=3.18<5.10.227

Linux Linux kernel>=5.11<5.15.168

Linux Linux kernel>=5.16<6.1.113

Linux Linux kernel>=6.2<6.6.55

Linux Linux kernel>=6.7<6.10.14

Linux Linux kernel>=6.11<6.11.3

Microsoft cbl2 kernel 5.15.167.1-2

Patch available

Microsoft cbl2 kernel 5.15.173.1-1

Patch available

Microsoft cbl2 kernel 5.15.167.1-2

Patch available

Microsoft azl3 kernel 6.6.51.1-5

Patch available

Microsoft azl3 kernel 6.6.57.1-2

Patch available

Debian Debian Linux=11.0

Linux Linux kernel>=3.18<4.19.323

Linux Linux kernel>=4.20<5.4.290

Linux Linux kernel>=5.5<5.10.227

debian/linux<6.1.115-1

6.1.115-1

debian/linux<6.11.4-1

6.11.4-1

debian/linux<6.11.4-1

6.11.4-1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-oracle*

ubuntu/linux-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1142.152~18.04.1

5.4.0-1142.152~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1147.154~18.04.1

5.4.0-1147.154~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1145.154~18.04.1

5.4.0-1145.154~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-211.231~18.04.1

5.4.0-211.231~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1090.95~18.04.1

5.4.0-1090.95~18.04.1

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1140.149~18.04.1

5.4.0-1140.149~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1129.142~18.04.1

5.4.0-1129.142~18.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-211.231

5.4.0-211.231

ubuntu/linux-aws<5.4.0-1142.152

5.4.0-1142.152

ubuntu/linux-aws-5.15<5.15.0-1073.79~20.04.1

5.15.0-1073.79~20.04.1

ubuntu/linux-azure<5.4.0-1147.154

5.4.0-1147.154

ubuntu/linux-azure-5.15<5.15.0-1078.87~20.04.1

5.15.0-1078.87~20.04.1

ubuntu/linux-bluefield<5.4.0-1101.108

5.4.0-1101.108

ubuntu/linux-gcp<5.4.0-1145.154

5.4.0-1145.154

ubuntu/linux-gcp-5.15<5.15.0-1072.80~20.04.1

5.15.0-1072.80~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-127.137~20.04.1

5.15.0-127.137~20.04.1

ubuntu/linux-ibm<5.4.0-1088.93

5.4.0-1088.93

ubuntu/linux-ibm-5.15<5.15.0-1066.69~20.04.1

5.15.0-1066.69~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1071.77~20.04.1

5.15.0-1071.77~20.04.1

ubuntu/linux-iot<5.4.0-1048.51

5.4.0-1048.51

ubuntu/linux-kvm<5.4.0-1129.138

5.4.0-1129.138

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-127.137~20.04.1

5.15.0-127.137~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1032.32~20.04.1

5.15.0-1032.32~20.04.1

ubuntu/linux-oracle<5.4.0-1140.150

5.4.0-1140.150

ubuntu/linux-oracle-5.15<5.15.0-1071.77~20.04.1

5.15.0-1071.77~20.04.1

ubuntu/linux-raspi<5.4.0-1129.142

5.4.0-1129.142

ubuntu/linux-riscv-5.15<5.15.0-1069.73~20.04.1

5.15.0-1069.73~20.04.1

ubuntu/linux-xilinx-zynqmp<5.4.0-1060.64

5.4.0-1060.64

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux-aws-fips<5.4.0-1142.153+fips1

5.4.0-1142.153+fips1

ubuntu/linux-azure-fips<5.4.0-1147.154+fips1

5.4.0-1147.154+fips1

ubuntu/linux-fips<5.4.0-1116.126

5.4.0-1116.126

ubuntu/linux-gcp-fips<5.4.0-1145.154+fips1

5.4.0-1145.154+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-127.137

5.15.0-127.137

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1073.79

5.15.0-1073.79

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1023.25~22.04.1

6.8.0-1023.25~22.04.1

ubuntu/linux-azure<5.15.0-1078.87

5.15.0-1078.87

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1025.30~22.04.1

6.8.0-1025.30~22.04.1

ubuntu/linux-azure-fde<5.15.0-1078.87.1

5.15.0-1078.87.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1072.80

5.15.0-1072.80

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1024.26~22.04.1

6.8.0-1024.26~22.04.1

ubuntu/linux-gke<5.15.0-1070.76

5.15.0-1070.76

ubuntu/linux-gkeop<5.15.0-1056.63

5.15.0-1056.63

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-57.59~22.04.1

6.8.0-57.59~22.04.1

ubuntu/linux-ibm<5.15.0-1066.69

5.15.0-1066.69

ubuntu/linux-ibm-6.8<6.8.0-1023.23~22.04.1

6.8.0-1023.23~22.04.1

ubuntu/linux-intel-iotg<5.15.0-1071.77

5.15.0-1071.77

ubuntu/linux-kvm<5.15.0-1070.75

5.15.0-1070.75

ubuntu/linux-lowlatency<5.15.0-127.137

5.15.0-127.137

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-54.56.1~22.04.1

6.8.0-54.56.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1068.69

5.15.0-1068.69

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1022.25~22.04.2

6.8.0-1022.25~22.04.2

ubuntu/linux-nvidia-tegra<5.15.0-1032.32

5.15.0-1032.32

ubuntu/linux-nvidia-tegra-igx<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1071.77

5.15.0-1071.77

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1020.21~22.04.1

6.8.0-1020.21~22.04.1

ubuntu/linux-raspi<5.15.0-1066.69

5.15.0-1066.69

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-53.55.1~22.04.1

6.8.0-53.55.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1039.43

5.15.0-1039.43

ubuntu/linux-bluefield<5.15.0-1057.59

5.15.0-1057.59

ubuntu/linux-intel-iot-realtime<5.15.0-1066.68

5.15.0-1066.68

ubuntu/linux-realtime<5.15.0-1074.82

5.15.0-1074.82

ubuntu/linux-realtime-6.8<6.8.1-1016.17~22.04.1

6.8.1-1016.17~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1073.79+fips1

5.15.0-1073.79+fips1

ubuntu/linux-azure-fips<5.15.0-1078.87+fips1

5.15.0-1078.87+fips1

ubuntu/linux-fips<5.15.0-127.137+fips1

5.15.0-127.137+fips1

ubuntu/linux-gcp-fips<5.15.0-1072.80+fips1

5.15.0-1072.80+fips1

ubuntu/linux<6.8.0-54.56

6.8.0-54.56

ubuntu/linux-aws<6.8.0-1023.25

6.8.0-1023.25

ubuntu/linux-azure<6.8.0-1025.30

6.8.0-1025.30

ubuntu/linux-azure-6.11<6.11.0-1012.12~24.04.1

6.11.0-1012.12~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1014.15

6.8.0-1014.15

ubuntu/linux-gcp<6.8.0-1024.26

6.8.0-1024.26

ubuntu/linux-gcp-6.11<6.11.0-1011.11~24.04.1

6.11.0-1011.11~24.04.1

ubuntu/linux-gke<6.8.0-1019.23

6.8.0-1019.23

ubuntu/linux-gkeop<6.8.0-1006.8

6.8.0-1006.8

ubuntu/linux-ibm<6.8.0-1022.22

6.8.0-1022.22

ubuntu/linux-lowlatency<6.8.0-54.56.1

6.8.0-54.56.1

ubuntu/linux-nvidia<6.8.0-1022.25

6.8.0-1022.25

ubuntu/linux-nvidia-6.11<6.11.0-1007.7

6.11.0-1007.7

ubuntu/linux-nvidia-lowlatency<6.8.0-1022.25.2

6.8.0-1022.25.2

ubuntu/linux-oem-6.11<6.11.0-1015.15

6.11.0-1015.15

ubuntu/linux-oem-6.8<6.8.0-1024.24

6.8.0-1024.24

ubuntu/linux-oracle<6.8.0-1020.21

6.8.0-1020.21

ubuntu/linux-raspi<6.8.0-1019.23

6.8.0-1019.23

ubuntu/linux-realtime*

ubuntu/linux-riscv<6.8.0-53.55.1

6.8.0-53.55.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2018.19

6.8.0-2018.19

ubuntu/linux-realtime<6.8.1-1016.17

6.8.1-1016.17

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.115-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.11.4-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.152~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1147.154~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1145.154~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-211.231~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1090.95~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.142~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-211.231
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.152
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1147.154
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1101.108
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1145.154
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1088.93
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1048.51
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.138
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.150
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1129.142
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1069.73~20.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1060.64
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1142.153+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1147.154+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1116.126
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1145.154+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.25~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1025.30~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.26~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.76
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1056.63
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-57.59~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.23~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.75
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1068.69
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25~22.04.2
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1032.32
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1071.77
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.21~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.69
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-53.55.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.43
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.59
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1066.68
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1074.82
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1016.17~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.79+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1078.87+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-127.137+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.80+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.25
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1025.30
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.12~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1014.15
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.26
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1011.11~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.23
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1006.8
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.22
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1007.7
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25.2
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.24
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.21
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.23
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-53.55.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2018.19
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1016.17
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Compensating control
In ext4_split_extent_at(), call ext4_find_extent() to update the path before zeroing or fixing the extent length; use *ppath directly as the ext4_ext_show_leaf() input to avoid use-after-free when EXT_DEBUG is defined and avoid unnecessary path updates.

Event History

Oct 21, 2024

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionSeverity

Data Sourced

via OSV·06:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·06:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via Red Hat·07:11 PM

DescriptionSeverityAffected Software

Nov 12, 2024

Data Sourced

via Microsoft·08:00 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·08:00 AM

Affected Software

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-49884?

CVE-2024-49884 is classified as a high-severity vulnerability in the Linux kernel due to a use-after-free issue.

How do I fix CVE-2024-49884?

To fix CVE-2024-49884, update your Linux kernel to a version that includes the patch, such as 6.1.123-1 or 6.12.11-1.

Which versions of the Linux kernel are affected by CVE-2024-49884?

CVE-2024-49884 affects Linux kernel versions between 3.18 and 5.10.227, as well as various versions up to 6.11.3.

Is CVE-2024-49884 exploitable?

Yes, CVE-2024-49884 can be potentially exploited by attackers to corrupt memory, leading to privilege escalation or denial of service.

What does the term 'use-after-free' mean in the context of CVE-2024-49884?

In the context of CVE-2024-49884, 'use-after-free' refers to accessing memory after it has been freed, which can lead to unstable system behavior or security vulnerabilities.

CVE-2024-49884: ext4: fix slab-use-after-free in ext4_split_extent_at()

Other sources

Affected Software

Remediation

Event History

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2024-49884?

How do I fix CVE-2024-49884?

Which versions of the Linux kernel are affected by CVE-2024-49884?

Is CVE-2024-49884 exploitable?

What does the term 'use-after-free' mean in the context of CVE-2024-49884?

Company

Resources

Contact