In the Linux kernel, the following vulnerability has been resolved:
jfs: Fix shift-out-of-bounds in dbDiscardAG
When searching for the next smaller log2 block, BLKSTOL2() returned 0, causing shift exponent -1 to be negative.
This patch fixes the issue by exiting the loop directly when negative shift is found.
[
{
"id": "CVE-2024-44938-329d2b1c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4de2c04c3acd5b84f50b0d2f8f09e9b2f42374b9",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-46f83137",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb7c605a754823b86dd74f6537ccb9d38a9dec5a",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-44938-622af86e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@234e6ea0855cdb5673d54ecaf7dc5c78f3e84630",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-6b4cb726",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@234e6ea0855cdb5673d54ecaf7dc5c78f3e84630",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-44938-7703a335",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7063b80268e2593e58bee8a8d709c2f3ff93e2f2",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-44938-82ca14b7",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7063b80268e2593e58bee8a8d709c2f3ff93e2f2",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-8eaa25f4",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f650148b43949ca9e37e820804bb6026fff404f3",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-44938-94d4a8b0",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb7c605a754823b86dd74f6537ccb9d38a9dec5a",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-984bdcf2",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd04a149e3a29e7f71b7956ed41dba34e42d539e",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-dae7ef5d",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bd04a149e3a29e7f71b7956ed41dba34e42d539e",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
},
{
"id": "CVE-2024-44938-e3da6aef",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f650148b43949ca9e37e820804bb6026fff404f3",
"digest": {
"line_hashes": [
"309045118228092035467389557744103721601",
"323400147417896021317663318157591690322",
"305586646653869412610276403351645677928",
"279036341044186781587576115787838548826"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2024-44938-f1dcc1ca",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "dbDiscardAG",
"file": "fs/jfs/jfs_dmap.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4de2c04c3acd5b84f50b0d2f8f09e9b2f42374b9",
"digest": {
"length": 1427.0,
"function_hash": "260316348763047871076059734828379743632"
},
"signature_type": "Function"
}
]