CVE-2024-56595 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
A missing bounds check in the JFS filesystem allows an out-of-bounds array access, potentially causing a system crash or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-56595?
CVE-2024-56595 is a high-severity vulnerability in Linux kernel, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
When the value of lp is 0 at the beginning of the for loop, it will become negative in the next assignment and we should bail out.
Weakness: CWE-129
Which versions are affected by CVE-2024-56595?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-56595?
Apply the vendor's patch.
Is CVE-2024-56595 being exploited?
There is no known exploitation of CVE-2024-56595 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-56595, DEBIAN-CVE-2024-56595, GHSA-56q7-cvh5-mq2r, UBUNTU-CVE-2024-56595.