CVE-2024-41015

CVE-2024-41015

High · published July 29, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: add bounds checking to ocfs2_check_dir_entry()

This adds sanity checks for ocfs2_dir_entry to make sure all members of

ocfs2_dir_entry don't stray beyond valid memory region.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.2th percentile
Published
2024-07-29T11:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.19.3194.19.319
linux/linux_kernel≥ 4.20, < 5.4.2815.4.281
linux/linux_kernel≥ 5.5, < 5.10.2235.10.223
linux/linux_kernel≥ 5.11, < 5.15.1645.15.164
linux/linux_kernel≥ 5.16, < 6.1.1026.1.102
linux/linux_kernel≥ 6.2, < 6.6.436.6.43
linux/linux_kernel≥ 6.7, < 6.9.126.9.12
linux/linux_kernel≥ 6.10, < 6.10.26.10.2
References (19)
https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 JUL 06:37Z
    ocfs2: add bounds checking to ocfs2_check_dir_entry()
    cvelistv5