A use-after-free vulnerability was found in the Linux kernel’s ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.
[
{
"vendor": "n/a",
"product": "Linux kernel ext4 filesystem",
"versions": [
{
"version": "Fixed in kernel 6.0-rc1",
"status": "affected"
}
]
}
]