CVE-2024-49889

A flaw was found in the Linux kernel's ext4 filesystem. This use-after-free vulnerability occurs in the ext4_ext_show_leaf() function when a previously freed or reallocated memory path is incorrectly used. This issue is only triggered when the EXT_DEBUG option is enabled, which means it does not affect the system's normal operation or functionality in typical production environments. Exploitation would require administrative or root privileges.

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.