CVE-2024-41017

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the jfs file system in the Linux kernel, specifically with the functions jfs getxattr() and jfs listxattr() in the fs/jfs/xattr.c module. It involves reading memory beyond the allocated buffer, which can lead to a denial of service. The problem is addressed by adding a check to ensure that each extended attribute (ea) stays within the ealist when visiting its members.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.