CVE-2024-47723

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no check for the case where bmp->db_numag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should be added in dbMount(). And in dbNextAG(), a check for the case where agpref is greater than bmp->db_numag should be added, so an out-of-bounds exception should be prevented. Additionally, a check for the case where agno is greater or same than MAXAG should be added in diAlloc() to prevent ou...

Affected product and versions

Product

Linux Linux, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Affected versions

>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d1017d2a0f3f16dc1db5120e7ddbe7c6680425b0, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5ad6284c8d433f8a213111c5c44ead4d9705b622, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0338e66cba272351ca9d7d03f3628e390e70963b, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ead82533278502428883085a787d5a00f15e5eb9, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6ce8b6ab44a8b5918c0ee373d4ad19d19017931b, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c1ba4b8ca799ff1d99d01f37d7ccb7d5ba5533d2, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 128d5cfdcf844cb690c9295a3a1c1114c21fc15a, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 96855f40e152989c9e7c20c4691ace5581098acc, >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e63866a475562810500ea7f784099bfe341e761a, >= 2.6.12, >= 2.6.12 < 5.10.227, >= 5.11 < 5.15.168, >= 5.16 < 6.1.113, >= 6.2 < 6.6.54, >= 6.7 < 6.10.13, >= 6.11 < 6.11.2

Fixed versions

5.10.227, 5.15.168, 6.1.113, 6.6.54, 6.10.13, 6.11.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

CWE-125