In the Linux kernel, the following vulnerability has been resolved:
jfs: check if leafidx greater than num leaves per dmap tree
syzbot report a out of bounds in dbSplit, it because dmtleafidx greater than num leaves per dmap tree, add a checking for dmtleafidx in dbFindLeaf.
Shaggy: Modified sanity check to apply to control pages as well as leaf pages.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25d2a3ff02f22e215ce53355619df10cc5faa7ab",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-0d05270d"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fff9a9f866e99931cf6fa260288e55d01626582",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-145134f7"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fff9a9f866e99931cf6fa260288e55d01626582",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-14e3e65e"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2451e5917c56be45d4add786e2a059dd9c2c37c4",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-222ca7c0"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d64ff0d2306713ff084d4b09f84ed1a8c75ecc32",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-27696d9a"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35b91f15f44ce3c01eba058ccb864bb04743e792",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-2a7765c4"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25d2a3ff02f22e215ce53355619df10cc5faa7ab",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-2a8124a2"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76b9a4c283c7535ae7c7c9b14984e75402951e1",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-396978f4"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@058aa89b3318be3d66a103ba7c68d717561e1dc6",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-3bfd9678"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a7bf6a01fb441009a6698179a739957efd88e38",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-589f8615"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0eb10558802764f07de1dc439c4609e27cb4f0",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-65329205"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35b91f15f44ce3c01eba058ccb864bb04743e792",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-75ca0170"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d64ff0d2306713ff084d4b09f84ed1a8c75ecc32",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-c392b9d6"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a7bf6a01fb441009a6698179a739957efd88e38",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-cc4c9d71"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"324206275795120080037708484469238468591",
"117022611753787849294459788057719225506",
"178364187566434841877223349890761038876",
"9009191778701929019240255096454185994",
"328186193289896949035058623033457319623",
"18327143276943224745845393037327114525",
"167069507730694413451003851660317231185",
"132626338407500995268375408135356938911",
"76623055390256194127801721753138180511"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76b9a4c283c7535ae7c7c9b14984e75402951e1",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"id": "CVE-2024-49902-ce09f003"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0eb10558802764f07de1dc439c4609e27cb4f0",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-ddd4a86f"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@058aa89b3318be3d66a103ba7c68d717561e1dc6",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-eb2aa239"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 597.0,
"function_hash": "133251604943931705173951184977680476801"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2451e5917c56be45d4add786e2a059dd9c2c37c4",
"target": {
"file": "fs/jfs/jfs_dmap.c",
"function": "dbFindLeaf"
},
"id": "CVE-2024-49902-f1ed16e1"
}
]