CVE-2024-40902 jfs: xattr: fix buffer overflow for invalid xattr
A buffer overflow in the Linux kernel JFS filesystem allows attackers to cause a denial of service or potentially execute code via crafted extended attributes.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-40902?
CVE-2024-40902 is a high-severity memory corruption vulnerability in Linux kernel, published on 12 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
jfs: xattr: fix buffer overflow for invalid xattr
When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer.
Fix this all up by properly restricting the size of the debug hex dump in the kernel log.
Which versions are affected by CVE-2024-40902?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-40902?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-40902 being exploited?
There is no known exploitation of CVE-2024-40902 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-47002, BELL-CVE-2024-40902, DEBIAN-CVE-2024-40902, GHSA-rphx-6vqr-23h3, UBUNTU-CVE-2024-40902.