PT-2024-33808 · Linux+5 · Linux Kernel+5

Published 2024-10-21 · Updated 2025-06-09 · CVE-2024-49967

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A vulnerability in the Linux kernel has been resolved, specifically in the ext4 component, where there was no need to continue when the number of entries is 1. The upstream kernel version 6.6.58 fixes bugs and vulnerabilities.

Recommendations: For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the ext4 component until a patch is available.

Exploit

Fix

Related Identifiers

ALT-PU-2024-14046

ALT-PU-2024-14270

ALT-PU-2024-15739

ALT-PU-2024-16172

CVE-2024-49967

DLA-4008-1

INFSA-2025_6966

MGASA-2024-0344

MGASA-2024-0345

OESA-2024-2367

OESA-2024-2424

OESA-2024-2425

OESA-2024-2426

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2024_3983-1

OPENSUSE-SU-2024_3984-1

OPENSUSE-SU-2024_3985-1

OPENSUSE-SU-2024_3986-1

OPENSUSE-SU-2025:14705-1

RHSA-2025:6966

RHSA-2025_6966

SUSE-SU-2024:3983-1

SUSE-SU-2024:3984-1

SUSE-SU-2024:3985-1

SUSE-SU-2024:3986-1

SUSE-SU-2024:4100-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:0034-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7166-1

USN-7166-2

USN-7166-3

USN-7166-4

USN-7167-1

USN-7167-2

USN-7169-1

USN-7169-2

USN-7169-3

USN-7169-4

USN-7169-5

USN-7170-1

USN-7173-1

USN-7173-2

USN-7173-3

USN-7183-1

USN-7184-1

USN-7185-1

USN-7185-2

USN-7186-1

USN-7186-2

USN-7194-1

USN-7195-1

USN-7195-2

USN-7196-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 2503

• 🔥 https://github.com/lrh2000/CVE-2023-2002 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-3338-DECPwn · Exploit
• 🔥 https://github.com/Freax13/cve-2023-46813-poc · Exploit
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49954 · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49898 · Security Note
• https://ubuntu.com/security/CVE-2024-46803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50083 · Security Note
• https://ubuntu.com/security/CVE-2024-46737 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52751 · Vendor Advisory