CVE-2024-57850 jffs2: Prevent rtime decompress memory corruption
A missing bounds check in the Linux kernel's jffs2 rtime decompression routine allows memory corruption, potentially leading to code execution or system crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-57850?
CVE-2024-57850 is a high-severity memory corruption vulnerability in Linux kernel, published on 11 Jan 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
jffs2: Prevent rtime decompress memory corruption
The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed data is corrupted. This adds the required check to prevent this failure mode.
Weakness: CWE-787
Which versions are affected by CVE-2024-57850?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57850?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-57850 being exploited?
There is no known exploitation of CVE-2024-57850 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-57850, DEBIAN-CVE-2024-57850, GHSA-4753-4rxp-9h3p, UBUNTU-CVE-2024-57850.