CVE-2024-47723: linux Out-of-bounds Read
Vulnerability summary
CVE-2024-47723 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 19.9% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 48 · Related 46Timeline
- 21-10-2024PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: jfs: fix out-of-bounds in dbNextAG() and diAlloc() In dbNextAG() , there is no check for the case where bmp->db_numag is greater or same than MAXAG due to a polluted image, which causes an out-of-bounds. Therefore, a bounds check should be added in dbMount(). And in dbNextAG(), a check for the case where agpref is greater than bmp->db_numag should be added, so an out-of-bounds exception should be prevented. Additionally, a check for the case where agno is greater or same than MAXAG should be added in diAlloc() to prevent out-of-bounds.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HDiffers
- NVDNIST7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HDiffers
EPSS trend
Probability
0.29%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.29% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu134 products
- linuxAll versions (No fix recorded) | < 5.4.0-208.228 | < 5.15.0-127.137 | < 6.8.0-54.56
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1140.150 | < 5.15.0-1073.79 | < 6.8.0-1023.25
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d1017d2a0f3f16dc1db5120e7ddbe7c6680425b0 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5ad6284c8d433f8a213111c5c44ead4d9705b622 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0338e66cba272351ca9d7d03f3628e390e70963b | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ead82533278502428883085a787d5a00f15e5eb9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 6ce8b6ab44a8b5918c0ee373d4ad19d19017931b | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c1ba4b8ca799ff1d99d01f37d7ccb7d5ba5533d2 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 128d5cfdcf844cb690c9295a3a1c1114c21fc15a | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 96855f40e152989c9e7c20c4691ace5581098acc | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e63866a475562810500ea7f784099bfe341e761a | 2.6.12
- linux_kernel≥ 2.6.12, < 5.10.227 | ≥ 5.11, < 5.15.168 | ≥ 5.16, < 6.1.113 | ≥ 6.2, < 6.6.54 | ≥ 6.7, < 6.10.13 | ≥ 6.11, < 6.11.2
Debian1 product
- linux< 6.1.115-1 | < 6.11.2-1
3 vendors · 137 products
