Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-41016
HistoryJul 29, 2024 - 7:15 a.m.

CVE-2024-41016

2024-07-2907:15:06
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
8
linux kernel
ocfs2
vulnerability

EPSS

0

Percentile

9.4%

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

xattr in ocfs2 maybe ‘non-indexed’, which saved with additional space
requested. It’s better to check if the memory is out of bound before
memcmp, although this possibility mainly comes from crafted poisonous
images.