CVE - CVE-2024-49889

CVE-ID
CVE-2024-49889	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be freed by error or be reallocated, so using a previously saved ppath may have been freed and thus may trigger use-after-free, as follows: ext4_split_extent path = ppath; ext4_split_extent_at(ppath) path = ext4_find_extent(ppath) ext4_split_extent_at(ppath) // ext4_find_extent fails to free path // but zeroout succeeds ext4_ext_show_leaf(inode, path) eh = path[depth].p_hdr // path use-after-free !!! Similar to ext4_split_extent_at(), we use ppath directly as an input to ext4_ext_show_leaf(). Fix a spelling error by the way. Same problem in ext4_ext_handle_unwritten_extents(). Since 'path' is only used in ext4_ext_show_leaf(), remove 'path' and use ppath directly. This issue is triggered only when EXT_DEBUG is defined and therefore does not affect functionality.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2eba3b0cc5b8de624918d21f32b5b8db59a90b39 URL:https://git.kernel.org/stable/c/2eba3b0cc5b8de624918d21f32b5b8db59a90b39 MISC:https://git.kernel.org/stable/c/34b2096380ba475771971a778a478661a791aa15 URL:https://git.kernel.org/stable/c/34b2096380ba475771971a778a478661a791aa15 MISC:https://git.kernel.org/stable/c/4999fed877bb64e3e7f9ab9996de2ca983c41928 URL:https://git.kernel.org/stable/c/4999fed877bb64e3e7f9ab9996de2ca983c41928 MISC:https://git.kernel.org/stable/c/4e2524ba2ca5f54bdbb9e5153bea00421ef653f5 URL:https://git.kernel.org/stable/c/4e2524ba2ca5f54bdbb9e5153bea00421ef653f5 MISC:https://git.kernel.org/stable/c/8b114f2cc7dd5d36729d040b68432fbd0f0a8868 URL:https://git.kernel.org/stable/c/8b114f2cc7dd5d36729d040b68432fbd0f0a8868 MISC:https://git.kernel.org/stable/c/b0cb4561fc4284d04e69c8a66c8504928ab2484e URL:https://git.kernel.org/stable/c/b0cb4561fc4284d04e69c8a66c8504928ab2484e MISC:https://git.kernel.org/stable/c/d483c7cc1796bd6a80e7b3a8fd494996260f6b67 URL:https://git.kernel.org/stable/c/d483c7cc1796bd6a80e7b3a8fd494996260f6b67
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)