CVE-2024-41015

ocfs2: add bounds checking to ocfs2_check_dir_entry()

MEDIUM

5.5

CVSS Score

Published: July 29, 2024 at 06:37 AM UTC

Updated: August 5, 2026 at 12:04 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_check_dir_entry() This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v < 4.19.3192.6.24 ≤ v < 4.19.3192.6.24 ≤ v < 5.10.2232.6.24 ≤ v < 5.15.1642.6.24 ≤ v < 5.4.2812.6.24 ≤ v < 6.1.1022.6.24 ≤ v < 6.10.22.6.24 ≤ v < 6.112.6.24 ≤ v < 6.6.432.6.24 ≤ v < 6.9.124.20 ≤ v < 5.4.2815.11 ≤ v < 5.15.1645.16 ≤ v < 6.1.1025.5 ≤ v < 5.10.2236.10 ≤ v < 6.10.26.2 ≤ v < 6.6.436.7 ≤ v < 6.9.122.6.2423193e513d1cd69411469f028d56fd175d4a6b07

Vendor states this is fixed in 13d38c00df97289e6fba2e54193959293fd910d2 (fixed)

Vendor states this is fixed in 255547c6bb8940a97eea94ef9d464ea5967763fb (fixed)

Vendor states this is fixed in 53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7 (fixed)

Vendor states this is fixed in 564d23cc5b216211e1694d53f7e45959396874d0 (fixed)

Vendor states this is fixed in 624b380074f0dc209fb8706db3295c735079f34c (fixed)

Vendor states this is fixed in 77495e5da5cb110a8fed27b052c77853fe282176 (fixed)

Vendor states this is fixed in e05a24289db90f76ff606086aadd62d068a88dcd (fixed)

Vendor states this is fixed in edb2e67dd4626b06fd7eb37252d5067912e78d59 (fixed)

Vendor states this is fixed in fd65685594ee707cbf3ddf22ebb73697786ac114 (fixed)

Vendor states this is fixed in 2.6.24 (unaffected)

Vendor states this is fixed in 4.19.319 (unaffected)

Vendor states this is fixed in 5.10.223 (unaffected)

Vendor states this is fixed in 5.15.164 (unaffected)

Vendor states this is fixed in 5.4.281 (unaffected)

Vendor states this is fixed in 6.1.102 (unaffected)

Vendor states this is fixed in 6.10.2 (unaffected)

Vendor states this is fixed in 6.11 (unaffected)

Vendor states this is fixed in 6.6.43 (unaffected)

Vendor states this is fixed in 6.9.12 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references