CVE-2024-43858

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to an array-index-out-of-bounds vulnerability in the diFree function of the jfs file system in the Linux kernel. This vulnerability is associated with accessing memory beyond the allocated buffer, which could allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider restricting access to the jfs file system until the update is applied.