CVE-2024-0775 is a use-after-free flaw in the __ext4_remount function within the ext4 filesystem code (fs/ext4/super.c) of the Linux kernel. This flaw occurs when the kernel frees old quota file names before a potential failure, leading to use-after-free conditions. The vulnerability allows a local user with high privileges to cause an information leak and potentially impact confidentiality, integrity, and availability. The CVSS 3.1 vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Red Hat's advisory notes that no mitigation meeting their criteria is currently available. The vulnerability affects several Linux kernel versions explicitly listed, and no known exploits are reported in the wild at this time.

The vulnerability allows a local user with high privileges to cause an information leak by exploiting a use-after-free condition in the ext4 filesystem remount code. This can lead to unauthorized reading of memory, potential data corruption, denial of service via crashes, and possibly arbitrary code execution if exploited with malicious data. The CVSS score of 6.7 reflects a medium severity with high impact on confidentiality, integrity, and availability. No active exploitation has been reported.

Currently, no official patch or mitigation that meets Red Hat's criteria for ease of use, deployment, applicability, or stability is available. Users should monitor Red Hat advisories for updates and consider upgrading to fixed versions once they are released. Red Hat recommends consulting with Technical Account Managers for tailored guidance. No temporary workarounds or mitigations are provided in the advisory.