CVE-2024-56595

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56595
In the Linux kernel, the following vulnerability has been resolved: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/368a533152220b0a6f1142327d96c6b6361f3002 Patch
https://git.kernel.org/stable/c/3b5d21b56c3774bc84eab0a93aaac22a4475e2c4 Patch
https://git.kernel.org/stable/c/491487eeddccc4bb49f2e59d8c8f35bec89c15ca Patch
https://git.kernel.org/stable/c/8a4311bbde702362fe7412045d06ab6767235dac Patch
https://git.kernel.org/stable/c/a174706ba4dad895c40b1d2277bade16dfacdcd9 Patch
https://git.kernel.org/stable/c/a3d408870bc19b794646871bc4c3a5daa66f91c5 Patch
https://git.kernel.org/stable/c/b15000bcbecf27e0f7c0f149a409e5b865e28ca2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

16 Jan 2025, 16:47

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CWE CWE-129
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: jfs: agregar una verificación para evitar que el índice de la matriz esté fuera de los límites en dbAdjTree Cuando el valor de lp es 0 al comienzo del bucle for, se volverá negativo en la siguiente asignación y deberíamos abandonar.
References () https://git.kernel.org/stable/c/368a533152220b0a6f1142327d96c6b6361f3002 - () https://git.kernel.org/stable/c/368a533152220b0a6f1142327d96c6b6361f3002 - Patch
References () https://git.kernel.org/stable/c/3b5d21b56c3774bc84eab0a93aaac22a4475e2c4 - () https://git.kernel.org/stable/c/3b5d21b56c3774bc84eab0a93aaac22a4475e2c4 - Patch
References () https://git.kernel.org/stable/c/491487eeddccc4bb49f2e59d8c8f35bec89c15ca - () https://git.kernel.org/stable/c/491487eeddccc4bb49f2e59d8c8f35bec89c15ca - Patch
References () https://git.kernel.org/stable/c/8a4311bbde702362fe7412045d06ab6767235dac - () https://git.kernel.org/stable/c/8a4311bbde702362fe7412045d06ab6767235dac - Patch
References () https://git.kernel.org/stable/c/a174706ba4dad895c40b1d2277bade16dfacdcd9 - () https://git.kernel.org/stable/c/a174706ba4dad895c40b1d2277bade16dfacdcd9 - Patch
References () https://git.kernel.org/stable/c/a3d408870bc19b794646871bc4c3a5daa66f91c5 - () https://git.kernel.org/stable/c/a3d408870bc19b794646871bc4c3a5daa66f91c5 - Patch
References () https://git.kernel.org/stable/c/b15000bcbecf27e0f7c0f149a409e5b865e28ca2 - () https://git.kernel.org/stable/c/b15000bcbecf27e0f7c0f149a409e5b865e28ca2 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-01-16 16:47

NVD link : CVE-2024-56595

Mitre link : CVE-2024-56595

CVE.ORG link : CVE-2024-56595

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index