Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-56595

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b15000bcbecf27e0f7c0f149a409e5b865e28ca2affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 368a533152220b0a6f1142327d96c6b6361f3002affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a3d408870bc19b794646871bc4c3a5daa66f91c5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 491487eeddccc4bb49f2e59d8c8f35bec89c15caaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3b5d21b56c3774bc84eab0a93aaac22a4475e2c4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8a4311bbde702362fe7412045d06ab6767235dacaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a174706ba4dad895c40b1d2277bade16dfacdcd9affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.4.287 to ≤ 5.4.*unaffected
  • 5.10.231 to ≤ 5.10.*unaffected
  • 5.15.174 to ≤ 5.15.*unaffected
  • 6.1.120 to ≤ 6.1.*unaffected
  • 6.6.66 to ≤ 6.6.*unaffected
  • 6.12.5 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References