CVE-2024-41015

low-risk
Published 2024-07-29

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_check_dir_entry() This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (19)

Patch https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2
Patch https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb
Patch https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7
Patch https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0
Patch https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c
Patch https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176
Patch https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd
Patch https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59
Patch https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114
Patch https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2
Patch https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb
Patch https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7
Patch https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0
Patch https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c
Patch https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176
Patch https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd
Patch https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59
Patch https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal