CVE-2024-43858

jfs: Fix array-index-out-of-bounds in diFree

State: Published
Severity: 7.8 High
Published: Aug 17, 2024
Updated: Oct 15, 2026
Reserved: Aug 17, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: Fix array-index-out-of-bounds in diFree

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 55b732c8b09b41148eaab2fa8e31b0af47671e00Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b3a4345957f5372041bc4f59de322f62653e862Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 538a27c8048f081a5ddd286f886eb986fbbc7f80Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 63f7fdf733add82f126ea00e2e48f6eba15ac4b9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d8f9a477de0d7962342eedf2a599215b7c63d28Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ff14eadc278663cac69d57d3ca7fb2f394e1f8a7Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6aa6892a90a5a7fabffe5692ab9f06a7a46c6e42Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f73f969b2eb39ad8056f6c7f3a295fa2f85e313aAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.320 through 4.19.Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 55b732c8b09b41148eaab2fa8e31b0af47671e00Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9b3a4345957f5372041bc4f59de322f62653e862Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 538a27c8048f081a5ddd286f886eb986fbbc7f80Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 63f7fdf733add82f126ea00e2e48f6eba15ac4b9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8d8f9a477de0d7962342eedf2a599215b7c63d28Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ff14eadc278663cac69d57d3ca7fb2f394e1f8a7Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6aa6892a90a5a7fabffe5692ab9f06a7a46c6e42Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f73f969b2eb39ad8056f6c7f3a295fa2f85e313aAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.320 through 4.19.*Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.