VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 12, 2024· Updated Jan 5, 2026

jfs: xattr: fix buffer overflow for invalid xattr

CVE-2024-40902

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: xattr: fix buffer overflow for invalid xattr

When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer.

Fix this all up by properly restricting the size of the debug hex dump in the kernel log.

Affected products

152

Patches

8
4598233d9748
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
33aecc5799c9
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
480e5bc21f2c
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
fc745f6e83cb
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
1e84c9b18381
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
f0dedb5c511e
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
7c55b78818cf
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
b537cb2f4c4a
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

8

News mentions

0

No linked articles in our index yet.