Threats tagged 'ghsa-h9fx-4jcw-948x'

A use-after-free vulnerability exists in the ext4 filesystem implementation in the Linux kernel. The issue arises because ext4_put_super() frees the superblock information (sbi) and associated counters without waiting for a grace period, potentially allowing a pathwalk in ext4_get_link() to dereference freed memory. This can lead to a null pointer dereference and kernel crash. The vulnerability is difficult to trigger and typically requires a race condition involving the last reference to a mount going away outside of the usual unmount path.