In the Linux kernel, the following vulnerability has been resolved:
ocfs2: add bounds checking to ocfs2xattrfind_entry()
Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2",
        "id": "CVE-2024-47670-01664fd8",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f",
        "id": "CVE-2024-47670-03588a76",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6",
        "id": "CVE-2024-47670-0e3c84cb",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd",
        "id": "CVE-2024-47670-10a0c218",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6",
        "id": "CVE-2024-47670-138378b1",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd",
        "id": "CVE-2024-47670-196e1c57",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1",
        "id": "CVE-2024-47670-296545d3",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39",
        "id": "CVE-2024-47670-2cdcdda3",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2",
        "id": "CVE-2024-47670-370da479",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6",
        "id": "CVE-2024-47670-37f1ace5",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39",
        "id": "CVE-2024-47670-3c3f852f",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6",
        "id": "CVE-2024-47670-48b31bd1",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd",
        "id": "CVE-2024-47670-4aed63a0",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1",
        "id": "CVE-2024-47670-4c8f3771",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2",
        "id": "CVE-2024-47670-4de4ff7a",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77",
        "id": "CVE-2024-47670-512eb85b",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77",
        "id": "CVE-2024-47670-6d4e5d8d",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39",
        "id": "CVE-2024-47670-6fc7b54d",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77",
        "id": "CVE-2024-47670-76fe0b92",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2",
        "id": "CVE-2024-47670-79812281",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1",
        "id": "CVE-2024-47670-7e241076",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39",
        "id": "CVE-2024-47670-87cb5147",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f",
        "id": "CVE-2024-47670-8b82793c",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39",
        "id": "CVE-2024-47670-96b87b62",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1",
        "id": "CVE-2024-47670-a245ae34",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77",
        "id": "CVE-2024-47670-abddb452",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6",
        "id": "CVE-2024-47670-ae716b70",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f",
        "id": "CVE-2024-47670-be52dc22",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77",
        "id": "CVE-2024-47670-bfa34174",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd",
        "id": "CVE-2024-47670-cc6a5e1f",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_block_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 960.0,
            "function_hash": "54152096713972672159806144057578397793"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2",
        "id": "CVE-2024-47670-df486d31",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_find",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1111.0,
            "function_hash": "300990846891013663309120302084920019915"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1",
        "id": "CVE-2024-47670-e243f716",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_find_entry",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 561.0,
            "function_hash": "311108337583931033902505875808289407539"
        },
        "signature_type": "Function"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd",
        "id": "CVE-2024-47670-e321430f",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f",
        "id": "CVE-2024-47670-ec8fe610",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60799215768588903486270260374785921452",
                "290029990979824778327542791591004832107",
                "4694094545282730263178474444865749785",
                "62227450157677338034391797415891040118",
                "60509064019048265705142759620561082034",
                "67021980896497332813264595199928548719",
                "187810852667381752014033049152242110700",
                "39948446155033136803993920960654103412",
                "146422423370932403505677957102562339665",
                "311351397069433103591744134670970408361",
                "126553933901280971939880256419614519523",
                "70697775443554877603261546493525169829",
                "213678289959242818896411257410709444974",
                "210465143582518657883252977961908192618",
                "148763613340642773638629988998698367092",
                "53900351324548903948914133076003233297",
                "265025684052021524768053845845570199410",
                "40931016388698900653592518280245437744",
                "203336959265991373672414321842894599115",
                "92339193722476865579368239912384904604"
            ]
        },
        "signature_type": "Line"
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f",
        "id": "CVE-2024-47670-ff870794",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "function": "ocfs2_xattr_ibody_get",
            "file": "fs/ocfs2/xattr.c"
        },
        "digest": {
            "length": 1192.0,
            "function_hash": "288937491566084108907219269001443311155"
        },
        "signature_type": "Function"
    }
]