CVE-2024-44938

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-44938
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix shift-out-of-bounds in dbDiscardAG When searching for the next smaller log2 block, BLKSTOL2() returned 0, causing shift exponent -1 to be negative. This patch fixes the issue by exiting the loop directly when negative shift is found.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/234e6ea0855cdb5673d54ecaf7dc5c78f3e84630 Patch
https://git.kernel.org/stable/c/4de2c04c3acd5b84f50b0d2f8f09e9b2f42374b9
https://git.kernel.org/stable/c/7063b80268e2593e58bee8a8d709c2f3ff93e2f2 Patch
https://git.kernel.org/stable/c/bb7c605a754823b86dd74f6537ccb9d38a9dec5a
https://git.kernel.org/stable/c/bd04a149e3a29e7f71b7956ed41dba34e42d539e Issue Tracking
https://git.kernel.org/stable/c/f650148b43949ca9e37e820804bb6026fff404f3 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 23:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Nov 2025, 20:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html -

02 May 2025, 07:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/4de2c04c3acd5b84f50b0d2f8f09e9b2f42374b9 -
  • () https://git.kernel.org/stable/c/bb7c605a754823b86dd74f6537ccb9d38a9dec5a -

12 Sep 2024, 14:05

Type Values Removed Values Added
CWE CWE-787
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/234e6ea0855cdb5673d54ecaf7dc5c78f3e84630 - () https://git.kernel.org/stable/c/234e6ea0855cdb5673d54ecaf7dc5c78f3e84630 - Patch
References () https://git.kernel.org/stable/c/7063b80268e2593e58bee8a8d709c2f3ff93e2f2 - () https://git.kernel.org/stable/c/7063b80268e2593e58bee8a8d709c2f3ff93e2f2 - Patch
References () https://git.kernel.org/stable/c/bd04a149e3a29e7f71b7956ed41dba34e42d539e - () https://git.kernel.org/stable/c/bd04a149e3a29e7f71b7956ed41dba34e42d539e - Issue Tracking
References () https://git.kernel.org/stable/c/f650148b43949ca9e37e820804bb6026fff404f3 - () https://git.kernel.org/stable/c/f650148b43949ca9e37e820804bb6026fff404f3 - Patch

29 Aug 2024, 17:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: jfs: corrigió el desplazamiento fuera de los límites en dbDiscardAG Al buscar el siguiente bloque log2 más pequeño, BLKSTOL2() devolvió 0, lo que provocó que el exponente de desplazamiento -1 fuera negativo. Este parche soluciona el problema saliendo del bucle directamente cuando se encuentra un cambio negativo.
References
  • () https://git.kernel.org/stable/c/bd04a149e3a29e7f71b7956ed41dba34e42d539e -

26 Aug 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-26 12:15

Updated : 2025-11-03 23:15

NVD link : CVE-2024-44938

Mitre link : CVE-2024-44938

CVE.ORG link : CVE-2024-44938

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write