CVE-2024-49882 ext4: fix double brelse() the buffer of the extents path

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses CVE-2024-49881 and CVE-2024-49882 in ext4 Filesystem Microsoft has published information regarding two vulnerabilities in the ext4 filesystem: CVE-2024-49881 and CVE-2024-49882, both of which were published on October 21, 2024. These vulnerabilities involve issues with the handling of extent paths and buffer management, potentially affecting systems utilizing the ext4 filesystem. 2 sources 41