CVE-2024-41015
kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 29, 2024
Updated · August 5, 2026
Description
A vulnerability was found in the OCFS2 filesystem in the Linux Kernel. This issue has been addressed by adding bounds checking to the ocfs2_check_dir_entry() function. This update introduces sanity checks to ensure that all members of the ocfs2_dir_entry structure remain within valid memory regions, preventing out-of-bounds memory access.
Statement
Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer