CVE-2024-56595: jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
In the Linux kernel, the following vulnerability has been resolved:
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-56595?
The severity of CVE-2024-56595 has not been explicitly rated, but it involves an array-index-out-of-bounds vulnerability in the Linux kernel.
How do I fix CVE-2024-56595?
To fix CVE-2024-56595, update your Linux kernel to a version that includes the patch for this vulnerability.
Which versions of the Linux kernel are affected by CVE-2024-56595?
CVE-2024-56595 affects multiple versions of the Linux kernel, specifically from version 5.4.287 to 6.12.5, excluding certain versions.
What is the nature of the vulnerability in CVE-2024-56595?
CVE-2024-56595 is an array-index-out-of-bounds vulnerability that occurs in the JFS file system module of the Linux kernel.
Is CVE-2024-56595 remotely exploitable?
The information available does not specify whether CVE-2024-56595 is remotely exploitable, but such vulnerabilities often require local privilege escalation.