In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Add validity check for db_maxag and db_agpref
Both db_maxag and db_agpref are used as the index of the db_agfree array, but there is currently no validity check for db_maxag and db_agpref, which can lead to errors.
The following is related bug reported by Syzbot:
UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:639:20 index 7936 is out of range for type 'atomic_t[128]'
Add checking that the values of db_maxag and db_agpref are valid indexes for the db_agfree array.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-devel | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-azure-fde-5.15Upgrade linux-gkeop-5.15Upgrade linux-aws-5.4Upgrade linux-nvidia-6.5Upgrade linux-raspiUpgrade linux-iotUpgrade linuxUpgrade linux-azureUpgrade linux-azure-fipsUpgrade linux-azure-fdeUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.4Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-gkeUpgrade linux-oracle-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub