Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-40902

July 12, 2024, 4:34 p.m.

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2024-07-12
CVE-2024-40902

Product(s) Impacted

Linux kernel

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer. Fix this all up by properly restricting the size of the debug hex dump in the kernel log.

Weaknesses

Date

Published: July 12, 2024, 1:15 p.m.

Last Modified: July 12, 2024, 4:34 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/ 416baaa9-dc9f-4396-8d5f-8c081fb06d67