CVE-2024-41017

Summary

In the Linux kernel, the following vulnerability has been resolved:

jfs: don't walk off the end of ealist

Add a check before visiting the members of ea to make sure each ea stays within the ealist.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7f91bd0f2941fa36449ce1a15faaa64f840d9746affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fc16776a82e8df97b6c4f9a10ba95aa44cef7ba5affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6386f1b6a10e5d1ddd03db4ff6dfc55d488852ceaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 7e21574195a45fc193555fa40e99fed16565ff7eaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4e034f7e563ab723b93a59980e4a1bb33198ece8affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 17440dbc66ab98b410514b04987f61deedb86751affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < f4435f476b9bf059cd9e26a69f5b29c768d00375affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < dbde7bc91093fa9c2410e418b236b70fde044b73affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d0fa70aca54c8643248e89061da23752506ec0d4affected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux4.19.319 <= 4.19.*unaffected
LinuxLinux5.4.281 <= 5.4.*unaffected
LinuxLinux5.10.223 <= 5.10.*unaffected
LinuxLinux5.15.164 <= 5.15.*unaffected
LinuxLinux6.1.102 <= 6.1.*unaffected
LinuxLinux6.6.43 <= 6.6.*unaffected
LinuxLinux6.9.12 <= 6.9.*unaffected
LinuxLinux6.10.2 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References