CVE-2024-0775

2024-01-2200:00:00

ubuntu.com

use-after-free flaw

ext4_remount

linux kernel

information leak

potential failure

bugzilla.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

5.1%

JSON

A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in
ext4 in the Linux kernel. This flaw allows a local user to cause an
information leak problem while freeing the old quota file names before a
potential failure, leading to a use-after-free.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlinux< 4.15.0-223.235UNKNOWN
ubuntu20.04noarchlinux< 5.4.0-162.179UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-83.92UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-252.286UNKNOWN
ubuntu18.04noarchlinux-aws< 4.15.0-1166.179UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1109.118UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1044.49UNKNOWN
ubuntu14.04noarchlinux-aws< 4.4.0-1129.135UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1167.182UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1044.49~20.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	linux	< 4.15.0-223.235	UNKNOWN
ubuntu	20.04	noarch	linux	< 5.4.0-162.179	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-83.92	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-252.286	UNKNOWN
ubuntu	18.04	noarch	linux-aws	< 4.15.0-1166.179	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1109.118	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1044.49	UNKNOWN
ubuntu	14.04	noarch	linux-aws	< 4.4.0-1129.135	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1167.182	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1044.49~20.04.1	UNKNOWN