Threats tagged 'ghsa-jw72-qv66-6947'

CVE-2025-37738 is a use-after-free vulnerability in the ext4 filesystem implementation of the Linux kernel. The flaw occurs in the function ext4_xattr_inode_dec_ref_all, where extended attribute (xattr) entries past the designated end are not properly ignored, leading to a slab-use-after-free error. This issue was detected by Kernel Address Sanitizer (KASAN) and could result in memory corruption. The vulnerability affects Linux kernel versions prior to the fix and has a high severity rating with a CVSS score of 7.8.