CVE-2024-56597

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix shift-out-of-bounds in dbSplit

When dmt_budmin is less than zero, it causes errors in the later stages. Added a check to return an error beforehand in dbAllocCtl itself.

Moderate severity is assigned to this flaw because exploitation requires local access with the capability to mount a specially crafted filesystem image, constraining both the attack vector and blast radius. Red Hat Enterprise Linux releases are not affected as the legacy JFS filesystem is disabled by default in shipping kernel configurations. In environments where custom kernels enable the driver, mounting a corrupted storage volume could result in a denial of service or unintended kernel memory exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.