CVE-2024-38599

🗓️ 19 Jun 2024 13:45:47Reported by LinuxType

In Linux kernel, vulnerability CVE-2024-38599 has been resolved by preventing xattr node overflow the eraseblock

Reporter	Title	Published	Views	Family All 214
AstraLinux	Astra Linux - уязвимость в linux, linux-5.10, linux-5.15, linux-6.1	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the jffs2 component in the Linux operating system’s kernel allows a hacker to cause a service failure.	25 Dec 202400:00	–	bdu_fstec
CloudLinux	kernel: Fix of 39 CVEs	22 Oct 202513:29	–	cloudlinux
CNNVD	Linux kernel security vulnerabilities	19 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-38599 jffs2: prevent xattr node from overflowing the eraseblock	19 Jun 202413:45	–	cvelist
Debian	[SECURITY] [DLA 3840-1] linux security update	27 Jun 202411:30	–	debian
Debian	[SECURITY] [DSA 5730-1] linux security update	15 Jul 202420:09	–	debian
Debian CVE	CVE-2024-38599	19 Jun 202413:45	–	debiancve
Tenable Nessus	Debian dla-3840 : hyperv-daemons - security update	27 Jun 202400:00	–	nessus
Tenable Nessus	Debian dsa-5730 : affs-modules-5.10.0-29-4kc-malta-di - security update	16 Jul 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange2.6.18–4.19.316

linux linux_kernelRange4.20–5.4.278

linux linux_kernelRange5.5–5.10.219

linux linux_kernelRange5.11–5.15.161

linux linux_kernelRange5.16–6.1.93

linux linux_kernelRange6.2–6.6.33

linux linux_kernelRange6.7–6.8.12

linux linux_kernelRange6.9–6.9.3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/jffs2/xattr.c"
    ],
    "versions": [
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "2904e1d9b64f72d291095e3cbb31634f08788b11",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "526235dffcac74c7823ed504dfac4f88d84ba5df",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "f0eea095ce8c959b86e1e57fe36ca4fea5ae54f8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "a1d21bcd78cf4a4353e1e835789429c6b76aca8b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "f06969df2e40ab1dc8f4364a5de967830c74a098",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "af82d8d2179b7277ad627c39e7e0778f1c86ccdb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "8d431391320c5c5398ff966fb3a95e68a7def275",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "978a12c91b38bf1a213e567f3c20e2beef215f07",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "c6854e5a267c28300ff045480b5a7ee7f6f1d913",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/jffs2/xattr.c"
    ],
    "versions": [
      {
        "version": "2.6.18",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.18",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.316",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.278",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.219",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.161",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.93",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/978a12c91b38bf1a213e567f3c20e2beef215f07
git	www.git.kernel.org/stable/c/c6854e5a267c28300ff045480b5a7ee7f6f1d913
git	www.git.kernel.org/stable/c/8d431391320c5c5398ff966fb3a95e68a7def275
git	www.git.kernel.org/stable/c/f06969df2e40ab1dc8f4364a5de967830c74a098
git	www.git.kernel.org/stable/c/af82d8d2179b7277ad627c39e7e0778f1c86ccdb
git	www.git.kernel.org/stable/c/2904e1d9b64f72d291095e3cbb31634f08788b11
git	www.git.kernel.org/stable/c/f0eea095ce8c959b86e1e57fe36ca4fea5ae54f8
git	www.git.kernel.org/stable/c/a1d21bcd78cf4a4353e1e835789429c6b76aca8b
git	www.git.kernel.org/stable/c/526235dffcac74c7823ed504dfac4f88d84ba5df
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00020.html

12 May 2026 12:16Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.1

EPSS0.00018

SSVC

CWE-125