Lucene search

LinuxVULNRICHMENT:CVE-2024-44938

HistoryAug 26, 2024 - 11:20 a.m.

CVE-2024-44938 jfs: Fix shift-out-of-bounds in dbDiscardAG

2024-08-2611:20:43

Linux

github.com

linux kernel

jfs

shift-out-of-bounds

AI Score

7.1

Confidence

Low

EPSS

Percentile

5.1%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

jfs: Fix shift-out-of-bounds in dbDiscardAG

When searching for the next smaller log2 block, BLKSTOL2() returned 0,
causing shift exponent -1 to be negative.

This patch fixes the issue by exiting the loop directly when negative
shift is found.

References

git.kernel.org/stable/c/234e6ea0855cdb5673d54ecaf7dc5c78f3e84630

git.kernel.org/stable/c/7063b80268e2593e58bee8a8d709c2f3ff93e2f2

git.kernel.org/stable/c/bd04a149e3a29e7f71b7956ed41dba34e42d539e

git.kernel.org/stable/c/f650148b43949ca9e37e820804bb6026fff404f3