CVE-2024-47670: ocfs2: add bounds checking to ocfs2_xattr_find_entry()
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: add bounds checking to ocfs2xattrfindentry()
Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47670?
The severity of CVE-2024-47670 is classified as high due to its potential impact on system integrity.
How do I fix CVE-2024-47670?
To fix CVE-2024-47670, upgrading to the patched versions of the Linux kernel mentioned in the advisory is recommended.
What systems are affected by CVE-2024-47670?
CVE-2024-47670 affects various versions of the Linux kernel, specifically versions prior to the ones available after the patch.
Is CVE-2024-47670 related to a specific component in the Linux kernel?
CVE-2024-47670 specifically addresses a vulnerability in the ocfs2 file system's extended attributes handling.
When was CVE-2024-47670 disclosed?
CVE-2024-47670 was disclosed as part of a recent security update to the Linux kernel.