In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in dbFindLeaf
Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-syms-rt | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub