Riskcovery

CVE-2024-56598

jfs: array-index-out-of-bounds fix in dtReadFirst

State
Published
Severity
7.1 High
Published
Dec 27, 2024
Updated
Aug 5, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: array-index-out-of-bounds fix in dtReadFirst

The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-129 Improper Validation of Array Index

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 25f1e673ef61d6bf9a6022e27936785896d74948Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8c97a4d5463a1c972ef576ac499ea9b05f956097Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 823d573f5450ca6be80b36f54d1902ac7cd23fb9Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2eea5fda5556ef03defebf07b0a12fcd2c5210f4Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd993b2180b4c373af8b99aa28d4dcda5c2a8f10Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 22dcbf7661c6ffc3247978c254dc40b833a0d429Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ca84a2c9be482836b86d780244f0357e5a778c46Affected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 5.4.287 through 5.4.*Not affected
  • 5.10.231 through 5.10.*Not affected
  • 5.15.174 through 5.15.*Not affected
  • 6.1.120 through 6.1.*Not affected
  • 6.6.66 through 6.6.*Not affected
  • 6.12.5 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.