CVE-2024-41016

Advisory lineage Upstream: 0 Downstream: 65
Modified
Published: 29 Jul 2024, 06:37
Last modified:12 May 2026, 11:56

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.02% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jul 2024, 06:37
Published
Vulnerability first disclosed
12 May 2026, 11:56
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 5%

Affected Systems

  • linux•linux

    ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090 | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < e8f9c4af7af7e9e4cd09c0251c7936593147419f | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637 | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < c031d286eceb82f72f8623b7f4abd2aa491bfb5e | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < cfb926051fab19b10d1e65976211f364aa820180 | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < c726dea9d0c806d64c26fcef483b1fb9474d8c5e | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < e4ffea01adf3323c821b6f37e9577d2d400adbaa | ≥ cf1d6c763fbcb115263114302485ad17e7933d87, < af77c4fc1871847b528d58b7fdafb4aa1f6a9262 | 2.6.28

  • linux•linux_kernel

    < 4.19.323 | ≥ 4.20, < 5.4.285 | ≥ 5.5, < 5.10.227 | ≥ 5.11, < 5.15.168 | ≥ 5.16, < 6.1.112 | ≥ 6.2, < 6.6.53 | ≥ 6.7, < 6.10.12

References (11)