In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in dbAdjTree
Currently there is a bound check missing in the dbAdjTree while accessing the dmt_stree. To add the required check added the bool is_ctl which is required to determine the size as suggest in the following commit. https://lore.kernel.org/linux-kernel-mentees/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-amlogic | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.5Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-181-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-starfiveUpgrade linux-image-4.15.0-1177-azureUpgrade linux-image-6.5.0-1019-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1014-starfiveUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1124-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1016-laptopUpgrade linux-image-oem-22.04dUpgrade linux-image-4.15.0-225-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1162-gcpUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.5.0-1020-awsUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-6.5.0-1019-nvidiaUpgrade linux-image-6.5.0-1021-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1131-oracleUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1021-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-35-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-4.15.0-1168-awsUpgrade linux-image-intelUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1132-kvmUpgrade linux-image-6.5.0-1017-raspiUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-6.5.0-1023-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1020-gcpUpgrade linux-image-4.4.0-254-lowlatencyUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-4.15.0-1152-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-35-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-35-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-225-genericUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-35-genericUpgrade linux-image-4.4.0-1131-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-254-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.4.0-1169-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1023-oracle-64kUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi-nolpae | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub