CVE-2024-49960: ext4: fix timer use-after-free on failed mount
ext4: fix timer use-after-free on failed mount
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Configuration
In ext4_fill_super failed mount path (failed_mount3), cancel the s_err_report timer after calling ext4_stop_mmpd using del_timer_sync, and ensure the timer is no longer active before kfree(sbi) is called.
Linux kernel ext4 s_err_report timer lifecycle (cancel via del_timer_sync) before kfree(sbi) = Ensure s_err_report timer is canceled/not active before kfree(sbi) during failed mount flow (failed_mount3 after ext4_stop_mmpd)
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49960?
CVE-2024-49960 is categorized as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-49960?
To fix CVE-2024-49960, update to the latest version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2024-49960?
CVE-2024-49960 affects Linux kernel versions between 6.7 and 6.10.14, and 6.11 to 6.11.3, along with versions earlier than 6.6.55.
What type of vulnerability is CVE-2024-49960?
CVE-2024-49960 is a use-after-free vulnerability related to the ext4 filesystem in the Linux kernel.
Can CVE-2024-49960 be exploited by an attacker?
Yes, CVE-2024-49960 can potentially be exploited by an attacker to cause denial of service or gain unauthorized access to system resources.