Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41016
HistoryJul 29, 2024 - 6:37 a.m.

CVE-2024-41016 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

2024-07-2906:37:02
Linux
github.com
2
linux kernel
ocfs2
xattr
bound check
memcmp
vulnerability
crafted images

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

xattr in ocfs2 maybe ‘non-indexed’, which saved with additional space
requested. It’s better to check if the memory is out of bound before
memcmp, although this possibility mainly comes from crafted poisonous
images.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial