CVE-2024-56598

Summary

In the Linux kernel, the following vulnerability has been resolved:

jfs: array-index-out-of-bounds fix in dtReadFirst

The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 25f1e673ef61d6bf9a6022e27936785896d74948affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8c97a4d5463a1c972ef576ac499ea9b05f956097affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 823d573f5450ca6be80b36f54d1902ac7cd23fb9affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2eea5fda5556ef03defebf07b0a12fcd2c5210f4affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fd993b2180b4c373af8b99aa28d4dcda5c2a8f10affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 22dcbf7661c6ffc3247978c254dc40b833a0d429affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ca84a2c9be482836b86d780244f0357e5a778c46affected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.66 <= 6.6.*unaffected
LinuxLinux6.12.5 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References