CVE-2024-41016

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()

xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= cf1d6c763fbcb115263114302485ad17e7933d87, < e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090; >= cf1d6c763fbcb115263114302485ad17e7933d87, < e8f9c4af7af7e9e4cd09c0251c7936593147419f; >= cf1d6c763fbcb115263114302485ad17e7933d87, < 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637; >= cf1d6c763fbcb115263114302485ad17e7933d87, < c031d286eceb82f72f8623b7f4abd2aa491bfb5e; >= cf1d6c763fbcb115263114302485ad17e7933d87, < cfb926051fab19b10d1e65976211f364aa820180; >= cf1d6c763fbcb115263114302485ad17e7933d87, < c726dea9d0c806d64c26fcef483b1fb9474d8c5e; >= cf1d6c763fbcb115263114302485ad17e7933d87, < e4ffea01adf3323c821b6f37e9577d2d400adbaa; >= cf1d6c763fbcb115263114302485ad17e7933d87, < af77c4fc1871847b528d58b7fdafb4aa1f6a9262
LinuxLinux2.6.28
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< V1.1.1

References

Timeline

Published
Jul 29, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-410175.5In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the CVE-2024-410185.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add a check for attr_names and oatbl Added out-of-bound checCVE-2024-410195.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Validate ff offset This adds sanity checks for ff offset. ThCVE-2024-41025.4The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() functionCVE-2024-410204.7In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commiCVE-2024-410215.5In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no CVE-2024-410225.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() The "inCVE-2024-410235.5In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix task_struct reference leak During the execution ofCVE-2024-410255.5In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix memory leak in audio daemon attach operation Audio CVE-2024-410265.5In the Linux kernel, the following vulnerability has been resolved: mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's leCVE-2024-410273.3In the Linux kernel, the following vulnerability has been resolved: Fix userfaultfd_api to return EINVAL as expected Currently if we requeCVE-2024-410287.8In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_acpi: Fix array out-of-bounds access In order to
CVE-2024-41016: Medium severity, CVSS 5.5 | Vulnix