QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-47670

Back to search

CVE-2024-47670

Published: Oct 9, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.

VendorProductVersions

Linux

Linux

affected
cf1d6c763fbcb115263114302485ad17e7933d87 - < b49a786beb11ff740cb9e0c20b999c2a0e1729c2
affected
cf1d6c763fbcb115263114302485ad17e7933d87 - < 60c0d36189bad58b1a8e69af8781d90009559ea1
affected
cf1d6c763fbcb115263114302485ad17e7933d87 - < 34759b7e4493d7337cbc414c132cef378c492a2c
affected
cf1d6c763fbcb115263114302485ad17e7933d87 - < 5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd
affected
cf1d6c763fbcb115263114302485ad17e7933d87 - < 9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f

+3 more versions

Linux

Linux

affected
2.6.28
unaffected
0 - < 2.6.28
unaffected
4.19.323 - <= 4.19.*
unaffected
5.4.285 - <= 5.4.*
unaffected
5.10.227 - <= 5.10.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now