CVE-2024-56598

A flaw was found in the Linux kernel's JFS (Journaled File System) implementation. An out-of-bounds array access can occur in the dtReadFirst function when reading directory data from a corrupted or maliciously crafted filesystem. A local user capable of mounting or processing such a filesystem could exploit this vulnerability to crash the system, resulting in a Denial of Service (DoS), or potentially access sensitive kernel memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the jfs kernel module from loading by executing the following command as root:

echo "install jfs /bin/true" >> /etc/modprobe.d/disable-jfs.conf

If the module is already loaded in the kernel, a system restart is required for the change to take effect.

Caveat: Applying this workaround will prevent mounting or reading any JFS filesystems on the system.