Threats tagged 'ghsa-24gv-qfv8-v7f5'

CVE-2024-49983 is a high-severity vulnerability in the Linux kernel's ext4 filesystem code. It involves a double-free memory error in the ext4_ext_replay_update_ex() function due to improper handling of pointers during extent splitting operations. This flaw can lead to memory corruption with potential confidentiality, integrity, and availability impacts. The issue arises because the 'path' pointer is freed twice, once directly and once indirectly via 'ppath'.