CVE-2024-56596

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in jfs_readdir

The stbl might contain some invalid values. Added a check to return error code in that case.

This vulnerability is rated as Moderate because triggering the flaw requires mounting a crafted JFS filesystem, which necessitates local administrative privileges or physical access to attach external media. A local attacker could exploit this defect to trigger an out-of-bounds memory access during directory read operations, resulting in a system crash and denial of service without compromising data integrity or confidentiality. Furthermore, the JFS filesystem driver is disabled in modern Red Hat Enterprise Linux releases, significantly limiting the potential exposure on standard deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.