PT-2024-6850 · Linux+4 · Linux Kernel+4
Syzbot
·
Published
2024-05-31
·
Updated
2026-03-14
·
CVE-2024-44941
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The vulnerability is related to a use-after-free issue in the
sanity check extent cache() function, which can be exploited to impact the confidentiality, integrity, and availability of protected information. The issue arises from a race condition where the sanity check extent cache() function is called without proper locking, allowing an attacker to access memory that has already been freed. This can occur when the f2fs iget() function is called, followed by do read inode(), f2fs init read extent tree(), and sanity check extent cache(). To fix this issue, the sanity check extent cache() function should be refactored to avoid extent cache access and called before f2fs init read extent tree().Recommendations
To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider disabling the
sanity check extent cache() function until a patch is available. However, this may have unintended consequences and should be carefully evaluated before implementation.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu