CVE-2024-41017

MEDIUM

Linux Kernel Memory Corruption via JFS Extended Attribute List Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist.

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 15.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (29)
linux/Kernel 2.6.12 - 4.19.319linux
linux/Kernel 4.20.0 - 5.4.281linux
linux/Kernel 5.11.0 - 5.15.164linux
linux/Kernel 5.16.0 - 6.1.102linux
linux/Kernel 5.5.0 - 5.10.223linux
linux/Kernel 6.10.0 - 6.10.2linux
linux/Kernel 6.2.0 - 6.6.43linux
linux/Kernel 6.7.0 - 6.9.12linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 17440dbc66ab98b410514b04987f61deedb86751
... and 19 more
Published Jul 29, 2024
Tracked Since Feb 18, 2026