Linux · Linux Kernel · CVE-2023-45898
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.5.4
**Description**
The issue is related to a use-after-free error in the ext4 file system driver of the Linux kernel, specifically in the fs/ext4/extents status.c file, related to the `ext4 es insert extent` function. This error is associated with the reuse of previously freed memory. Exploitation of this issue could allow an attacker to impact the confidentiality, integrity, and availability of protected information.
**Recommendations**
For Linux kernel versions prior to 6.5.4, update to version 6.5.4 or later to resolve the issue.
As a temporary workaround, consider restricting access to the ext4 file system to minimize the risk of exploitation.