CVE-2024-56596

jfs: fix array-index-out-of-bounds in jfs_readdir

Severity Score

"-"

*CVSS v-

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in jfs_readdir

The stbl might contain some invalid values. Added a check to
return error code in that case.

*Credits: N/A

CVSS Scores

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2024-12-27 CVE Reserved
2024-12-27 CVE Published
2024-12-27 CVE Updated
2024-12-28 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (7)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/b62f41aeec9d250144c53875b507c1d45ae8c8fc	2024-12-14
https://git.kernel.org/stable/c/97e693593162eef6851d232f0c8148169ed46a5c	2024-12-14
https://git.kernel.org/stable/c/9efe72eefd4c4a7ce63b3e4d667d766d2b360cb4	2024-12-14
https://git.kernel.org/stable/c/ff9fc48fab0e1ea0d423c23c99b91bba178f0b05	2024-12-14
https://git.kernel.org/stable/c/e7d376f94f72b020f84e77278b150ec1cc27502c	2024-12-14
https://git.kernel.org/stable/c/8ff7579554571d92e3deab168f5a7d7b146ed368	2024-12-14
https://git.kernel.org/stable/c/839f102efb168f02dfdd46717b7c6dddb26b015e	2024-10-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.4.287 Search vendor "Linux" for product "Linux Kernel" and version " < 5.4.287"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.231 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.231"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15.174 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15.174"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.1.120 Search vendor "Linux" for product "Linux Kernel" and version " < 6.1.120"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.6.66 Search vendor "Linux" for product "Linux Kernel" and version " < 6.6.66"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.12.5 Search vendor "Linux" for product "Linux Kernel" and version " < 6.12.5"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.13-rc1 Search vendor "Linux" for product "Linux Kernel" and version " < 6.13-rc1"		en		Affected