VULNERABILITY INTELLIGENCE

CVE-2024-49889

CVSS score7.8 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-10-21
Last modified2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid use-after-free in ext4_ext_show_leaf() In ext4_find_extent(), path may be freed by error or be reallocated, so using a previously saved *ppath may have been freed and thus may trigger use-after-free, as follows: ext4_…