CVE-2024-49889 ext4: avoid use-after-free in ext4_ext_show_leaf()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses CVEs in ext4 File System Vulnerabilities Microsoft has published information on two vulnerabilities in the ext4 file system: CVE-2024-49983 and CVE-2024-49889. CVE-2024-49983 involves a modification to avoid double free issues, while CVE-2024-49889 addresses a use-after-free condition. Both vulnerabilities were published on October 21, 2024. 2 sources 49