CVE-2024-49983: ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
ext4: drop ppath from ext4extreplayupdateex() to avoid double-free
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49983?
CVE-2024-49983 is considered a critical vulnerability due to the potential for double-free leading to memory corruption in the Linux kernel.
How do I fix CVE-2024-49983?
To fix CVE-2024-49983, update the Linux kernel to a version that includes the patch, such as versions after 6.1.123-1 or equivalent.
Which Linux kernel versions are affected by CVE-2024-49983?
CVE-2024-49983 affects various Linux kernel versions ranging from 5.10 up to 6.11.3, including specific ranges within these major versions.
What is the impact of exploiting CVE-2024-49983?
Exploitation of CVE-2024-49983 may lead to memory corruption which could allow an attacker to execute arbitrary code with kernel privileges.
Is there a known workaround for CVE-2024-49983?
Currently, the recommended resolution for CVE-2024-49983 is to apply the official kernel updates, and no effective workaround is available.