CVE-2024-41015

ocfs2: add bounds checking to ocfs2_check_dir_entry()

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: add bounds checking to ocfs2_check_dir_entry()

This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	23193e513d1cd69411469f028d56fd175d4a6b07 to before 13d38c00df97289e6fba2e54193959293fd910d2Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before 564d23cc5b216211e1694d53f7e45959396874d0Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before 77495e5da5cb110a8fed27b052c77853fe282176Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before 53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before fd65685594ee707cbf3ddf22ebb73697786ac114Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before e05a24289db90f76ff606086aadd62d068a88dcdAffected 23193e513d1cd69411469f028d56fd175d4a6b07 to before 624b380074f0dc209fb8706db3295c735079f34cAffected 23193e513d1cd69411469f028d56fd175d4a6b07 to before edb2e67dd4626b06fd7eb37252d5067912e78d59Affected 23193e513d1cd69411469f028d56fd175d4a6b07 to before 255547c6bb8940a97eea94ef9d464ea5967763fbAffected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 4.19.319 through 4.19.Not affected 5.4.281 through 5.4.Not affected 5.10.223 through 5.10.Not affected 5.15.164 through 5.15.Not affected 6.1.102 through 6.1.Not affected 6.6.43 through 6.6.Not affected 6.9.12 through 6.9.Not affected 6.10.2 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

23193e513d1cd69411469f028d56fd175d4a6b07 to before 13d38c00df97289e6fba2e54193959293fd910d2Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before 564d23cc5b216211e1694d53f7e45959396874d0Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before 77495e5da5cb110a8fed27b052c77853fe282176Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before 53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before fd65685594ee707cbf3ddf22ebb73697786ac114Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before e05a24289db90f76ff606086aadd62d068a88dcdAffected
23193e513d1cd69411469f028d56fd175d4a6b07 to before 624b380074f0dc209fb8706db3295c735079f34cAffected
23193e513d1cd69411469f028d56fd175d4a6b07 to before edb2e67dd4626b06fd7eb37252d5067912e78d59Affected
23193e513d1cd69411469f028d56fd175d4a6b07 to before 255547c6bb8940a97eea94ef9d464ea5967763fbAffected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
4.19.319 through 4.19.*Not affected
5.4.281 through 5.4.*Not affected
5.10.223 through 5.10.*Not affected
5.15.164 through 5.15.*Not affected
6.1.102 through 6.1.*Not affected
6.6.43 through 6.6.*Not affected
6.9.12 through 6.9.*Not affected
6.10.2 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.