CVE-2024-49902

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A vulnerability in the Linux kernel has been resolved, specifically in the jfs component. The issue arises when the dmt leafidx is greater than the number of leaves per dmap tree, causing an out-of-bounds error in dbSplit. To address this, a check for dmt leafidx has been added in dbFindLeaf. Additionally, a sanity check has been modified to apply to both control and leaf pages.

Recommendations: For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider applying the modified sanity check to control pages as well as leaf pages, and add a checking for dmt leafidx in dbFindLeaf to prevent out-of-bounds errors in dbSplit.