CVE-2024-41016

MEDIUM

Linux Kernel - Out-of-Bounds Memory Access in ocfs2_xattr_find_entry()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.

References (11)

Core 11
Core References

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 15.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (26)
linux/Kernel 2.6.28 - 4.19.323linux
linux/Kernel 4.20.0 - 5.4.285linux
linux/Kernel 5.11.0 - 5.15.168linux
linux/Kernel 5.16.0 - 6.1.112linux
linux/Kernel 5.5.0 - 5.10.227linux
linux/Kernel 6.2.0 - 6.6.53linux
linux/Kernel 6.7.0 - 6.10.12linux
Linux/Linux < 2.6.28
Linux/Linux 2.6.28
Linux/Linux 4.19.323 - 4.19.*
... and 16 more
Published Jul 29, 2024
Tracked Since Feb 18, 2026