CVE-2024-39467

A flaw was found in the f2fs (Flash-Friendly File System) component of the Linux kernel. A missing sanity check on the i_xattr_nid during f2fs_iget() can lead to a slab-out-of-bounds read when accessing the nat_bitmap with an invalid offset. A local attacker could exploit this memory corruption vulnerability to cause a system crash, leading to a denial of service. In some scenarios, this could potentially be leveraged for privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.