CVE-2024-35807

A vulnerability was found in the ext4 filesystem in the Linux kernel during on-line resizing operations. When an ext4 filesystem is resized while mounted, it could lead to data corruption.

This vulnerability is rated as Moderate because triggering the condition requires local administrative privileges to initiate filesystem resize operations. The flaw only manifests under specific operational circumstances, particularly when expanding an ext4 volume across meta block group boundaries where the resize_inode feature is disabled, such as on filesystems larger than 16 TiB. Unprivileged users cannot invoke the required ioctl interface, preventing unauthorized local exploitation or remote attacks in standard Red Hat Enterprise Linux environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.