Lucene search

K
osvGoogleOSV:CVE-2024-41016
HistoryJul 29, 2024 - 7:15 a.m.

CVE-2024-41016

2024-07-2907:15:06
Google
osv.dev
8
linux kernel
ocfs2_xattr_find_entry()
memory out of bound
vulnerability
cve-2024-41016

AI Score

7.8

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

xattr in ocfs2 maybe ‘non-indexed’, which saved with additional space
requested. It’s better to check if the memory is out of bound before
memcmp, although this possibility mainly comes from crafted poisonous
images.