In the Linux kernel, the following vulnerability has been resolved:
jfs: xattr: fix buffer overflow for invalid xattr
When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer.
Fix this all up by properly restricting the size of the debug hex dump in the kernel log.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-trace-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-ec2-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade kernel-xenUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-ec2Upgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-azureUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-ec2-baseUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-rt-livepatch | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-lts-vividUpgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-nvidia-64kUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lts-vividUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-lts-vividUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.15Upgrade linux-image-oemUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-ibmUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-virtualUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-generic-lts-utopicUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-lts-wilyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-classic | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub