CVE-2024-56595

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: May 11, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b15000bcbecf27e0f7c0f149a409e5b865e28ca2Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 368a533152220b0a6f1142327d96c6b6361f3002Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a3d408870bc19b794646871bc4c3a5daa66f91c5Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 491487eeddccc4bb49f2e59d8c8f35bec89c15caAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3b5d21b56c3774bc84eab0a93aaac22a4475e2c4Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8a4311bbde702362fe7412045d06ab6767235dacAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a174706ba4dad895c40b1d2277bade16dfacdcd9Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b15000bcbecf27e0f7c0f149a409e5b865e28ca2Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 368a533152220b0a6f1142327d96c6b6361f3002Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a3d408870bc19b794646871bc4c3a5daa66f91c5Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 491487eeddccc4bb49f2e59d8c8f35bec89c15caAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3b5d21b56c3774bc84eab0a93aaac22a4475e2c4Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8a4311bbde702362fe7412045d06ab6767235dacAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a174706ba4dad895c40b1d2277bade16dfacdcd9Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.