CVE-2024-0775
Assigner: redhat
Published: 2024-01-22T13:03:09.603Z
State: PUBLISHED
title: Kernel: use-after-free while changing the mount option in __ext4_remount leading
metrics: other: content: value: Moderate
namespace: https://access.redhat.com/security/updates/classification/
type: Red Hat severity rating
cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
descriptions: value: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information leak problem while freeing the old quota file names before a potential failure, leading to a use-after-free.
affected: versions: status: affected
version: 0
lessThan: 6.4-rc2
versionType: semver
packageName: kernel
collectionURL: https://git.kernel.org/pub/scm/linux/kernel
defaultStatus: unaffected
vendor: Red Hat
product: Red Hat Enterprise Linux 6
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:6
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:7
vendor: Red Hat
product: Red Hat Enterprise Linux 7
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:7
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
vendor: Red Hat
product: Red Hat Enterprise Linux 8
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: unaffected
cpes: cpe:/o:redhat:enterprise_linux:8
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:9
vendor: Red Hat
product: Red Hat Enterprise Linux 9
collectionURL: https://access.redhat.com/downloads/content/package-browser/
packageName: kernel-rt
defaultStatus: affected
cpes: cpe:/o:redhat:enterprise_linux:9
datePublic: 2023-05-05T00:00:00+00:00
problemTypes: descriptions: cweId: CWE-416
description: Use After Free
type: CWE
x_redhatCweChain: CWE-416: Use After Free
workarounds: value: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
timeline: time: 2024-01-21T00:00:00+00:00
value: Reported to Red Hat.
time: 2023-05-05T00:00:00+00:00
value: Made public.