CVE-2024-41013

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel, where a vulnerability has been resolved by adding sanity checks for xfs dir2 data unused and xfs dir2 data entry to prevent accessing memory beyond valid regions. Before the patch, a crafted image could lead to an out-of-bounds read when accessing fixed members. The patch ensures that the remaining bytes are large enough to hold an unused entry or a dirent with a single-byte name before accessing these variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.