VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 21, 2024· Updated May 12, 2026

CVE-2024-49902

CVE-2024-49902

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: check if leafidx greater than num leaves per dmap tree

syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf.

Shaggy: Modified sanity check to apply to control pages as well as leaf pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

In the Linux kernel, a missing bounds check in JFS filesystem code can lead to out-of-bounds access, potentially causing denial of service.

Vulnerability

Overview

The vulnerability resides in the JFS filesystem implementation in the Linux kernel. The dbFindLeaf function fails to validate that the dmt_leafidx value does not exceed the number of leaves per dmap tree. This missing bounds check can result in an out-of-bounds access in the dbSplit function, as reported by syzbot.

Attack

Vector and Prerequisites

An attacker with local access and low privileges can exploit this vulnerability. The attack is triggered by performing crafted operations on a JFS filesystem, such as mounting a maliciously crafted filesystem image. No network access or user interaction is required beyond the local system access.

Impact

Successful exploitation leads to an out-of-bounds memory access, which can cause a system crash (denial of service). The CVSS v3 base score is 5.5 (Medium), reflecting local low-privilege exploitation with high availability impact. There is no evidence of privilege escalation or data confidentiality breach.

Mitigation

The fix, introduced by Shaggy, adds a sanity check for dmt_leafidx in dbFindLeaf and extends it to control pages. The patch is available in the Linux kernel stable tree. Siemens advisory [1] lists this CVE for affected products like SIMATIC S7-1500 TM MFP - GNU/Linux subsystem.

References
  1. SSA-265688

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

106

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

13

News mentions

0

No linked articles in our index yet.