CVE-2024-49880 is an off-by-one error in the Linux kernel's ext4 filesystem, specifically within the alloc_flex_gd() function during filesystem resizing operations. This vulnerability affects the Linux kernel and can lead to a kernel BUG, causing system instability or crashes. It has a CVSS score of 7.8 (High), indicating that a local attacker with low privileges can exploit it with low attack complexity to achieve high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.8, < 6.10.14CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.11, < 6.11.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.