In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Add check for negative db_l2nbperpage
l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative.
In the case of l2nbperpage being negative, an error will occur when subsequently used as shift exponent.
Syzbot reported this bug:
UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12 shift exponent -16777216 is negative
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-syms-rt | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-realtimeUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fdeUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linux-iotUpgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-ibm-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegraUpgrade linux-nvidia-6.5Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linuxUpgrade linux-intel-iotgUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub