CVE-2024-56595

Summary

In the Linux kernel, the following vulnerability has been resolved:

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b15000bcbecf27e0f7c0f149a409e5b865e28ca2affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 368a533152220b0a6f1142327d96c6b6361f3002affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a3d408870bc19b794646871bc4c3a5daa66f91c5affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 491487eeddccc4bb49f2e59d8c8f35bec89c15caaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 3b5d21b56c3774bc84eab0a93aaac22a4475e2c4affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8a4311bbde702362fe7412045d06ab6767235dacaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < a174706ba4dad895c40b1d2277bade16dfacdcd9affected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.66 <= 6.6.*unaffected
LinuxLinux6.12.5 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References