CVE-2024-56597

jfs: fix shift-out-of-bounds in dbSplit

State: Published
Severity: 7.8 High
Published: Dec 27, 2024
Updated: Aug 5, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix shift-out-of-bounds in dbSplit

When dmt_budmin is less than zero, it causes errors in the later stages. Added a check to return an error beforehand in dbAllocCtl itself.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bbb24ce7f06ef9b7c05beb9340787cbe9fd3d08eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df7c76636952670b31bd6c12b3aed3c502122273Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6676034aa753aa448beb30dbd75630927ba7cd96Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51a203470f502a64a3da8dcea51c4748e8267a6cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c56245baf3fd1f79145dd7408e3ead034b74255cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 52756a57e978e2706543a254f88f266cc6702f36Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a5f5e4698f8abbb25fe4959814093fb5bfa1aa9dAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.66 through 6.6.Not affected 6.12.5 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bbb24ce7f06ef9b7c05beb9340787cbe9fd3d08eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before df7c76636952670b31bd6c12b3aed3c502122273Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6676034aa753aa448beb30dbd75630927ba7cd96Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 51a203470f502a64a3da8dcea51c4748e8267a6cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c56245baf3fd1f79145dd7408e3ead034b74255cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 52756a57e978e2706543a254f88f266cc6702f36Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a5f5e4698f8abbb25fe4959814093fb5bfa1aa9dAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.66 through 6.6.*Not affected
6.12.5 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.