https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:36:39 +0000 https://vulnerability.circl.lu/vuln/cve-2024-49960 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ext4: fix timer use-after-free on failed mount</p> <p>Syzbot has found an ODEBUG bug in ext4_fill_super</p> <p>The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We should guarantee the timer is no longer active before kfree(sbi).</p> <p>When filesystem mounting fails, the flow goes to failed_mount3, where an error occurs when ext4_stop_mmpd is called, causing a read I/O failure. This triggers the ext4_handle_error function that ultimately re-arms the timer, leaving the s_err_report timer active before kfree(sbi) is called.</p> <p>Fix the issue by canceling the s_err_report timer after calling ext4_stop_mmpd.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ext4: fix timer use-after-free on failed mount</p> <p>Syzbot has found an ODEBUG bug in ext4_fill_super</p> <p>The del_timer_sync function cancels the s_err_report timer, which reminds about filesystem errors daily. We should guarantee the timer is no longer active before kfree(sbi).</p> <p>When filesystem mounting fails, the flow goes to failed_mount3, where an error occurs when ext4_stop_mmpd is called, causing a read I/O failure. This triggers the ext4_handle_error function that ultimately re-arms the timer, leaving the s_err_report timer active before kfree(sbi) is called.</p> <p>Fix the issue by canceling the s_err_report timer after calling ext4_stop_mmpd.</p> https://vulnerability.circl.lu/vuln/cve-2024-49960