In the Linux kernel, the following vulnerability has been resolved:
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
In dbNextAG() , there is no check for the case where bmp->db_numag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should be added in dbMount().
And in dbNextAG(), a check for the case where agpref is greater than bmp->db_numag should be added, so an out-of-bounds exception should be prevented.
Additionally, a check for the case where agno is greater or same than MAXAG should be added in diAlloc() to prevent out-of-bounds.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-fipsUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub