CVE-2024-41017

CVE-2024-41017

High · published July 29, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

jfs: don't walk off the end of ealist

Add a check before visiting the members of ea to

make sure each ea stays within the ealist.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Published
2024-07-29T11:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.19.3194.19.319
linux/linux_kernel≥ 4.20, < 5.4.2815.4.281
linux/linux_kernel≥ 5.5, < 5.10.2235.10.223
linux/linux_kernel≥ 5.11, < 5.15.1645.15.164
linux/linux_kernel≥ 5.16, < 6.1.1026.1.102
linux/linux_kernel≥ 6.2, < 6.6.436.6.43
linux/linux_kernel≥ 6.7, < 6.9.126.9.12
linux/linux_kernel≥ 6.10, < 6.10.26.10.2
References (19)
https://git.kernel.org/stable/c/17440dbc66ab98b410514b04987f61deedb86751 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4e034f7e563ab723b93a59980e4a1bb33198ece8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6386f1b6a10e5d1ddd03db4ff6dfc55d488852ce · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7e21574195a45fc193555fa40e99fed16565ff7e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7f91bd0f2941fa36449ce1a15faaa64f840d9746 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0fa70aca54c8643248e89061da23752506ec0d4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dbde7bc91093fa9c2410e418b236b70fde044b73 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f4435f476b9bf059cd9e26a69f5b29c768d00375 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fc16776a82e8df97b6c4f9a10ba95aa44cef7ba5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/17440dbc66ab98b410514b04987f61deedb86751 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4e034f7e563ab723b93a59980e4a1bb33198ece8 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/6386f1b6a10e5d1ddd03db4ff6dfc55d488852ce · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7e21574195a45fc193555fa40e99fed16565ff7e · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7f91bd0f2941fa36449ce1a15faaa64f840d9746 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d0fa70aca54c8643248e89061da23752506ec0d4 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dbde7bc91093fa9c2410e418b236b70fde044b73 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f4435f476b9bf059cd9e26a69f5b29c768d00375 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fc16776a82e8df97b6c4f9a10ba95aa44cef7ba5 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 JUL 06:37Z
    jfs: don't walk off the end of ealist
    cvelistv5