PT-2024-14644
CVE-2023-52599
·
تاريخ النشر
2024-01-02
·
تاريخ التحديث
2026-10-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.7.0
Description
The issue is related to an array-index-out-of-bounds error in the
diNewExt function in the JFS file system. When the agstart value is too large, it can cause an agno overflow. This error is detected by the UBSAN (Undefined Behavior Sanitizer) tool. The error occurs in the fs/jfs/jfs imap.c file at line 2360. The fix involves checking the validity of the agno value after it is obtained and exiting the subsequent process if the value is invalid.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the array-index-out-of-bounds error in the
diNewExt function. As a temporary workaround, consider disabling the jfs file system until a patched version of the kernel is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾