Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-57850

jffs2: Prevent rtime decompress memory corruption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed data is corrupted. This adds the required check to prevent this failure mode.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 421f9e9f0fae9f8e721ffa07f22d9765fa1214d5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f6fc251baefc3cdc4f41f2f5a47940d7d4a67332affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bd384b04ad1995441b18fe6c1366d02de8c5d5ebaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 47c9a7f81027a78afea9d2e9a54bfd8fabb6b3d0affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6808a1812a3419542223e7fe9e2de577e99e45d1affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < dc39b08fcc3831b0bc46add91ba93cd2aab50716affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fe051552f5078fa02d593847529a3884305a6ffeaffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.4.287 to ≤ 5.4.*unaffected
  • 5.10.231 to ≤ 5.10.*unaffected
  • 5.15.174 to ≤ 5.15.*unaffected
  • 6.1.120 to ≤ 6.1.*unaffected
  • 6.6.66 to ≤ 6.6.*unaffected
  • 6.12.5 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References