Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-41016

ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cf1d6c763fbcb115263114302485ad17e7933d87 to < e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090affected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < e8f9c4af7af7e9e4cd09c0251c7936593147419faffected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637affected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < c031d286eceb82f72f8623b7f4abd2aa491bfb5eaffected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < cfb926051fab19b10d1e65976211f364aa820180affected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < c726dea9d0c806d64c26fcef483b1fb9474d8c5eaffected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < e4ffea01adf3323c821b6f37e9577d2d400adbaaaffected
  • cf1d6c763fbcb115263114302485ad17e7933d87 to < af77c4fc1871847b528d58b7fdafb4aa1f6a9262affected

Linux Linux

Default version status: affected

  • 2.6.28affected
  • 0 to < 2.6.28unaffected
  • 4.19.323 to ≤ 4.19.*unaffected
  • 5.4.285 to ≤ 5.4.*unaffected
  • 5.10.227 to ≤ 5.10.*unaffected
  • 5.15.168 to ≤ 5.15.*unaffected
  • 6.1.112 to ≤ 6.1.*unaffected
  • 6.6.53 to ≤ 6.6.*unaffected
  • 6.10.12 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References