CVE-2024-49884 ext4: fix slab-use-after-free in ext4_split_extent_at()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address Use-After-Free Vulnerabilities in ext4 CVE-2024-49884 and CVE-2024-49883, both published on 2024-10-21, address use-after-free vulnerabilities in the ext4 filesystem. These vulnerabilities could potentially allow attackers to exploit memory management issues. Affected systems include those utilizing the ext4 filesystem in various Linux distributions. 2 sources 45