In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in dbFindLeaf
Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-virtualUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1140-oracle | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub