In the Linux kernel, the following vulnerability has been resolved:
jfs: xattr: fix buffer overflow for invalid xattr
When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer.
Fix this all up by properly restricting the size of the debug hex dump in the kernel log.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-symsUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-ec2-baseUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-trace-baseUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-xen-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-xen-baseUpgrade kernel-traceUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade kernel-ec2Upgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-trace-develUpgrade dlm-kmp-azureUpgrade kernel-ec2-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-xenUpgrade dtb-appleUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-obs-qa | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lts-vividUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-virtual-lts-vividUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-aws-hweUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-lts-utopicUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lts-wilyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1120-kvm | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub