CVE-2024-49884

A flaw was found in the Linux kernel's ext4 filesystem. A memory corruption vulnerability, specifically a use-after-free, exists in the ext4_split_extent_at() function. This issue arises when an error during file extent creation causes the system to attempt to use memory that has already been released. An attacker with administrative privileges could exploit this to potentially cause a system crash or disclose sensitive information.

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.