VYPR
← All advisories
High severity7.1NVD Advisory· Published Oct 21, 2024· Updated May 12, 2026

CVE-2024-47723

CVE-2024-47723

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

In dbNextAG() , there is no check for the case where bmp->db_numag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should be added in dbMount().

And in dbNextAG(), a check for the case where agpref is greater than bmp->db_numag should be added, so an out-of-bounds exception should be prevented.

Additionally, a check for the case where agno is greater or same than MAXAG should be added in diAlloc() to prevent out-of-bounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

JFS filesystem in Linux kernel has out-of-bounds access in dbNextAG() and diAlloc() due to missing bounds checks, potentially leading to system crash.

The vulnerability resides in the JFS (Journaled File System) implementation in the Linux kernel. Specifically, the functions dbNextAG() and diAlloc() lack proper bounds checking when handling the number of allocation groups (bmp->db_numag). A corrupted filesystem image can cause these functions to access memory beyond allocated buffers, resulting in an out-of-bounds read or write [1].

An attacker with the ability to mount a specially crafted JFS filesystem image can trigger the out-of-bounds condition. The exploit requires local access to mount the malicious filesystem, typically requiring root privileges or the ability to attach a storage device. No network vector exists; the attack is local [1].

Successful exploitation can lead to a system crash (denial of service) or potentially memory corruption. The vulnerability is rated High with CVSS 7.1, indicating moderate impact with high availability impact. No remote code execution is mentioned [1].

The fix involves adding bounds checks in dbMount() and in the functions themselves. The patch was submitted to the Linux kernel stable tree. Users should apply kernel updates to versions containing the fix [1]. The Siemens advisory lists affected products including SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, but no specific remediation steps beyond updating.

References
  1. SSA-265688

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

106

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

13

News mentions

0

No linked articles in our index yet.