CVE-2024-49883 ext4: aovid use-after-free in ext4_ext_insert_extent()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address Use-After-Free Vulnerabilities in ext4 CVE-2024-49884 and CVE-2024-49883, both published on 2024-10-21, address use-after-free vulnerabilities in the ext4 filesystem. These vulnerabilities could potentially allow attackers to exploit memory management issues. Affected systems include those utilizing the ext4 filesystem in various Linux distributions. 2 sources 45