CVE-2024-41015 (GCVE-0-2024-41015)
Vulnerability from cvelistv5
Published
2024-07-29 06:37
Modified
2026-08-05 11:34
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_check_dir_entry() This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region.
References
Impacted products
Vendor Product Version
Linux Linux Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
Version: 23193e513d1cd69411469f028d56fd175d4a6b07
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:59:17.542Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-41015",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:24:46.545116Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:05.831Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ocfs2/dir.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "13d38c00df97289e6fba2e54193959293fd910d2",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "564d23cc5b216211e1694d53f7e45959396874d0",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "77495e5da5cb110a8fed27b052c77853fe282176",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "fd65685594ee707cbf3ddf22ebb73697786ac114",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "e05a24289db90f76ff606086aadd62d068a88dcd",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "624b380074f0dc209fb8706db3295c735079f34c",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "edb2e67dd4626b06fd7eb37252d5067912e78d59",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            },
            {
              "lessThan": "255547c6bb8940a97eea94ef9d464ea5967763fb",
              "status": "affected",
              "version": "23193e513d1cd69411469f028d56fd175d4a6b07",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ocfs2/dir.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.24"
            },
            {
              "lessThan": "2.6.24",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.319",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.281",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.223",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.164",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.102",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.43",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.319",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.281",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.223",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.164",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.102",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.43",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.12",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.2",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "2.6.24",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: add bounds checking to ocfs2_check_dir_entry()\n\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\nocfs2_dir_entry don\u0027t stray beyond valid memory region."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Reaching `ocfs2_check_dir_entry()`/`ocfs2_search_dirblock()` requires a crafted OCFS2 volume to be present locally (loop-mounted image file or an attached block device/USB stick) and then touched with an ordinary path-walk or `getdents()`; ocfs2 directory parsing is not exposed by any remote protocol handler.\nAC:L - The attacker authors the on-disk dirents, and `rec_len` is an unvalidated `__le16` that the scan loop only rejects when zero, so `de_buf` can be steered to any byte offset (including `b_data + blocksize - 1`) and the out-of-bounds header read in `ocfs2_match()` fires deterministically on the first `stat()`/`readdir()` \u2014 no race, no memory-layout luck, and no non-default kernel config.\nPR:L - An unprivileged local user supplies the poisoned image (a file for loop-mount, or removable media handled by udisks2/systemd automount) and then triggers the path with plain unprivileged `open()`/`stat()`/`readdir()`/`rename()` on the crafted directory; the attacker needs no capability of their own.\nUI:N - On the common desktop/kiosk/embedded deployment the attacker-supplied device is mounted automatically by the automount daemon, and the attacking process itself then issues the syscall that walks the malformed directory \u2014 no deliberate action by another user is required.\nS:U - The out-of-bounds accesses and the resulting metadata corruption stay inside the kernel\u0027s own memory and security authority; no VM, IOMMU, container, or sandbox boundary is crossed.\nC:H - `ocfs2_match()` reads `de-\u003einode`, `de-\u003ename_len` and `memcmp()`s the name up to ~12 bytes past the end of the page-cache block buffer, and `ocfs2_check_dir_entry()`\u0027s `mlog(ML_ERROR, \u2026)` then prints that out-of-bounds `de-\u003einode` verbatim into the kernel log, while the match/no-match result forms a byte-granular oracle over adjacent kernel memory; for inline dirs the missing `i_size` bound also lets `dir_emit()` hand bytes from beyond the valid region to userspace.\nI:H - Dirents that stray outside the valid region pass validation and are then written in place \u2014 `le16_add_cpu(\u0026pde-\u003erec_len, \u2026)` and `de-\u003einode = 0` in `__ocfs2_delete_entry()`, `de-\u003einode`/`file_type` in `ocfs2_update_entry()`, and `de1-\u003erec_len`/`de-\u003ename_len`/`memcpy(de-\u003ename, name, namelen)` in `__ocfs2_add_entry()` \u2014 through unaligned pointers whose offsets are derived from out-of-bounds-read `rec_len`/`name_len`, giving attacker-controlled writes outside the region the code believes it owns.\nA:H - The read past a block buffer that can be a full page reliably trips KASAN and can fault on an unmapped adjacent page (DEBUG_PAGEALLOC, highmem/kmap, sparsemem section edge), producing an oops, and the `BUG_ON((char *)de \u003e= (size + data_start))` in `__ocfs2_add_entry()` becomes reachable for inline-data dirs because the old check bounded against the block rather than `i_size` \u2014 a kernel BUG taken with the journal handle and inode locks held; the trigger is repeatable on demand."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:34:41.032Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"
        },
        {
          "url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"
        },
        {
          "url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"
        },
        {
          "url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"
        },
        {
          "url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"
        },
        {
          "url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"
        },
        {
          "url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"
        }
      ],
      "title": "ocfs2: add bounds checking to ocfs2_check_dir_entry()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-41015",
    "datePublished": "2024-07-29T06:37:01.651Z",
    "dateReserved": "2024-07-12T12:17:45.612Z",
    "dateUpdated": "2026-08-05T11:34:41.032Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T21:59:17.542Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-41015\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:24:46.545116Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:20.616Z\"}}], \"cna\": {\"title\": \"ocfs2: add bounds checking to ocfs2_check_dir_entry()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"13d38c00df97289e6fba2e54193959293fd910d2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"564d23cc5b216211e1694d53f7e45959396874d0\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"77495e5da5cb110a8fed27b052c77853fe282176\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"fd65685594ee707cbf3ddf22ebb73697786ac114\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"e05a24289db90f76ff606086aadd62d068a88dcd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"624b380074f0dc209fb8706db3295c735079f34c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"edb2e67dd4626b06fd7eb37252d5067912e78d59\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"23193e513d1cd69411469f028d56fd175d4a6b07\", \"lessThan\": \"255547c6bb8940a97eea94ef9d464ea5967763fb\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/ocfs2/dir.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.24\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.24\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.319\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.281\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.223\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.164\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.102\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.43\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/ocfs2/dir.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2\"}, {\"url\": \"https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0\"}, {\"url\": \"https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176\"}, {\"url\": \"https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7\"}, {\"url\": \"https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114\"}, {\"url\": \"https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd\"}, {\"url\": \"https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c\"}, {\"url\": \"https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59\"}, {\"url\": \"https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nocfs2: add bounds checking to ocfs2_check_dir_entry()\\n\\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\\nocfs2_dir_entry don\u0027t stray beyond valid memory region.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.319\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.281\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.223\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.164\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.102\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.43\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.12\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.2\", \"versionStartIncluding\": \"2.6.24\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"2.6.24\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-01-05T10:37:22.624Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-41015\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-05T10:37:22.624Z\", \"dateReserved\": \"2024-07-12T12:17:45.612Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-29T06:37:01.651Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.