CVE-2024-56598

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56598
In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/22dcbf7661c6ffc3247978c254dc40b833a0d429 Patch
https://git.kernel.org/stable/c/25f1e673ef61d6bf9a6022e27936785896d74948 Patch
https://git.kernel.org/stable/c/2eea5fda5556ef03defebf07b0a12fcd2c5210f4 Patch
https://git.kernel.org/stable/c/823d573f5450ca6be80b36f54d1902ac7cd23fb9 Patch
https://git.kernel.org/stable/c/8c97a4d5463a1c972ef576ac499ea9b05f956097 Patch
https://git.kernel.org/stable/c/ca84a2c9be482836b86d780244f0357e5a778c46 Patch
https://git.kernel.org/stable/c/fd993b2180b4c373af8b99aa28d4dcda5c2a8f10 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

16 Jan 2025, 16:12

Type Values Removed Values Added
CWE CWE-129
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/22dcbf7661c6ffc3247978c254dc40b833a0d429 - () https://git.kernel.org/stable/c/22dcbf7661c6ffc3247978c254dc40b833a0d429 - Patch
References () https://git.kernel.org/stable/c/25f1e673ef61d6bf9a6022e27936785896d74948 - () https://git.kernel.org/stable/c/25f1e673ef61d6bf9a6022e27936785896d74948 - Patch
References () https://git.kernel.org/stable/c/2eea5fda5556ef03defebf07b0a12fcd2c5210f4 - () https://git.kernel.org/stable/c/2eea5fda5556ef03defebf07b0a12fcd2c5210f4 - Patch
References () https://git.kernel.org/stable/c/823d573f5450ca6be80b36f54d1902ac7cd23fb9 - () https://git.kernel.org/stable/c/823d573f5450ca6be80b36f54d1902ac7cd23fb9 - Patch
References () https://git.kernel.org/stable/c/8c97a4d5463a1c972ef576ac499ea9b05f956097 - () https://git.kernel.org/stable/c/8c97a4d5463a1c972ef576ac499ea9b05f956097 - Patch
References () https://git.kernel.org/stable/c/ca84a2c9be482836b86d780244f0357e5a778c46 - () https://git.kernel.org/stable/c/ca84a2c9be482836b86d780244f0357e5a778c46 - Patch
References () https://git.kernel.org/stable/c/fd993b2180b4c373af8b99aa28d4dcda5c2a8f10 - () https://git.kernel.org/stable/c/fd993b2180b4c373af8b99aa28d4dcda5c2a8f10 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: jfs: arreglo de array-index-out-of-bounds en dtReadFirst El valor de stbl a veces puede estar fuera de los límites debido a un sistema de archivos defectuoso. Se agregó una verificación con el retorno apropiado del código de error en ese caso.

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-01-16 16:12

NVD link : CVE-2024-56598

Mitre link : CVE-2024-56598

CVE.ORG link : CVE-2024-56598

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index