Lucene search

CVE-2024-38599 jffs2: prevent xattr node from overflowing the eraseblock

🗓️ 19 Jun 2024 13:47:45Reported by LinuxType

Prevent xattr node overflow in jffs

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 151
OSV	UBUNTU-CVE-2024-38599	19 Jun 202414:15	–	osv
OSV	CVE-2024-38599	19 Jun 202414:15	–	osv
OSV	SUSE-SU-2024:4038-1 Security update for the Linux Kernel	19 Nov 202408:50	–	osv
OSV	SUSE-SU-2024:2895-1 Security update for the Linux Kernel	13 Aug 202414:08	–	osv
OSV	USN-6951-2 linux-azure vulnerabilities	14 Aug 202417:25	–	osv
OSV	USN-6951-3 linux-azure-5.4 vulnerabilities	19 Aug 202415:54	–	osv
OSV	USN-6951-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-raspi, linux-xilinx-zynqmp vulnerabilities	8 Aug 202422:45	–	osv
OSV	USN-6951-4 linux-bluefield vulnerabilities	21 Aug 202416:57	–	osv
OSV	USN-6979-1 linux-raspi-5.4 vulnerabilities	22 Aug 202411:54	–	osv
OSV	USN-6953-1 linux-oracle, linux-oracle-5.4 vulnerabilities	9 Aug 202400:08	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/jffs2/xattr.c"
    ],
    "versions": [
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "2904e1d9b64f72d291095e3cbb31634f08788b11",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "526235dffcac74c7823ed504dfac4f88d84ba5df",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "f0eea095ce8c959b86e1e57fe36ca4fea5ae54f8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "a1d21bcd78cf4a4353e1e835789429c6b76aca8b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "f06969df2e40ab1dc8f4364a5de967830c74a098",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "af82d8d2179b7277ad627c39e7e0778f1c86ccdb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "8d431391320c5c5398ff966fb3a95e68a7def275",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "978a12c91b38bf1a213e567f3c20e2beef215f07",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "aa98d7cf59b5b0764d3502662053489585faf2fe",
        "lessThan": "c6854e5a267c28300ff045480b5a7ee7f6f1d913",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/jffs2/xattr.c"
    ],
    "versions": [
      {
        "version": "2.6.18",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.18",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.316",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.278",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.219",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.161",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.93",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.33",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8.12",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.9.3",
        "lessThanOrEqual": "6.9.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.10",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/af82d8d2179b7277ad627c39e7e0778f1c86ccdb
git	www.git.kernel.org/stable/c/8d431391320c5c5398ff966fb3a95e68a7def275
git	www.git.kernel.org/stable/c/978a12c91b38bf1a213e567f3c20e2beef215f07
git	www.git.kernel.org/stable/c/f0eea095ce8c959b86e1e57fe36ca4fea5ae54f8
git	www.git.kernel.org/stable/c/a1d21bcd78cf4a4353e1e835789429c6b76aca8b
git	www.git.kernel.org/stable/c/2904e1d9b64f72d291095e3cbb31634f08788b11
git	www.git.kernel.org/stable/c/526235dffcac74c7823ed504dfac4f88d84ba5df
git	www.git.kernel.org/stable/c/c6854e5a267c28300ff045480b5a7ee7f6f1d913
git	www.git.kernel.org/stable/c/f06969df2e40ab1dc8f4364a5de967830c74a098

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jun 2024 13:45Current

EPSS0.00389