[SRU][N][PATCH 0/1] CVE-2024-56595

Massimiliano Pellizzer massimiliano.pellizzer at canonical.com
Fri Feb 28 07:51:44 UTC 2025


[Impact]

jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

When the value of lp is 0 at the beginning of the for loop, it will
become negative in the next assignment and we should bail out.

[Fix]

Oracular: Fixed via upstream stable updates (LP: #2096827)
Noble: Clean cherry pick from mainline
Jammy: Fixed via upstream stable updates (LP: #2095283)
Focal: Fixed via upstream stable updates (LP: #2095145)

[Test Case]

Compile tested only.

[Where problems could occur]

A regression here is unlikely due to the very limited scope of the
patch.

Nihar Chaithanya (1):
  jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree

 fs/jfs/jfs_dmap.c | 3 +++
 1 file changed, 3 insertions(+)

-- 
2.43.0




More information about the kernel-team mailing list