CVE-2024-41015

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-41015", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-12T12:17:45.612Z", "datePublished": "2024-07-29T06:37:01.651Z", "dateUpdated": "2026-08-05T11:34:41.032Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T11:34:41.032Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: add bounds checking to ocfs2_check_dir_entry()\n\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\nocfs2_dir_entry don't stray beyond valid memory region."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - Reaching `ocfs2_check_dir_entry()`/`ocfs2_search_dirblock()` requires a crafted OCFS2 volume to be present locally (loop-mounted image file or an attached block device/USB stick) and then touched with an ordinary path-walk or `getdents()`; ocfs2 directory parsing is not exposed by any remote protocol handler.\nAC:L - The attacker authors the on-disk dirents, and `rec_len` is an unvalidated `__le16` that the scan loop only rejects when zero, so `de_buf` can be steered to any byte offset (including `b_data + blocksize - 1`) and the out-of-bounds header read in `ocfs2_match()` fires deterministically on the first `stat()`/`readdir()` \u2014 no race, no memory-layout luck, and no non-default kernel config.\nPR:L - An unprivileged local user supplies the poisoned image (a file for loop-mount, or removable media handled by udisks2/systemd automount) and then triggers the path with plain unprivileged `open()`/`stat()`/`readdir()`/`rename()` on the crafted directory; the attacker needs no capability of their own.\nUI:N - On the common desktop/kiosk/embedded deployment the attacker-supplied device is mounted automatically by the automount daemon, and the attacking process itself then issues the syscall that walks the malformed directory \u2014 no deliberate action by another user is required.\nS:U - The out-of-bounds accesses and the resulting metadata corruption stay inside the kernel's own memory and security authority; no VM, IOMMU, container, or sandbox boundary is crossed.\nC:H - `ocfs2_match()` reads `de->inode`, `de->name_len` and `memcmp()`s the name up to ~12 bytes past the end of the page-cache block buffer, and `ocfs2_check_dir_entry()`'s `mlog(ML_ERROR, \u2026)` then prints that out-of-bounds `de->inode` verbatim into the kernel log, while the match/no-match result forms a byte-granular oracle over adjacent kernel memory; for inline dirs the missing `i_size` bound also lets `dir_emit()` hand bytes from beyond the valid region to userspace.\nI:H - Dirents that stray outside the valid region pass validation and are then written in place \u2014 `le16_add_cpu(&pde->rec_len, \u2026)` and `de->inode = 0` in `__ocfs2_delete_entry()`, `de->inode`/`file_type` in `ocfs2_update_entry()`, and `de1->rec_len`/`de->name_len`/`memcpy(de->name, name, namelen)` in `__ocfs2_add_entry()` \u2014 through unaligned pointers whose offsets are derived from out-of-bounds-read `rec_len`/`name_len`, giving attacker-controlled writes outside the region the code believes it owns.\nA:H - The read past a block buffer that can be a full page reliably trips KASAN and can fault on an unmapped adjacent page (DEBUG_PAGEALLOC, highmem/kmap, sparsemem section edge), producing an oops, and the `BUG_ON((char *)de >= (size + data_start))` in `__ocfs2_add_entry()` becomes reachable for inline-data dirs because the old check bounded against the block rather than `i_size` \u2014 a kernel BUG taken with the journal handle and inode locks held; the trigger is repeatable on demand."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/dir.c"], "versions": [{"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "13d38c00df97289e6fba2e54193959293fd910d2", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "564d23cc5b216211e1694d53f7e45959396874d0", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "77495e5da5cb110a8fed27b052c77853fe282176", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "fd65685594ee707cbf3ddf22ebb73697786ac114", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "e05a24289db90f76ff606086aadd62d068a88dcd", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "624b380074f0dc209fb8706db3295c735079f34c", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "edb2e67dd4626b06fd7eb37252d5067912e78d59", "status": "affected", "versionType": "git"}, {"version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "255547c6bb8940a97eea94ef9d464ea5967763fb", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/dir.c"], "versions": [{"version": "2.6.24", "status": "affected"}, {"version": "0", "lessThan": "2.6.24", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.319", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.281", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.223", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.164", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.102", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.43", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.12", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10.2", "lessThanOrEqual": "6.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.11", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "4.19.319"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "5.4.281"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "5.10.223"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "5.15.164"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "6.1.102"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "6.6.43"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "6.9.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "6.10.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.24", "versionEndExcluding": "6.11"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"}, {"url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"}, {"url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"}, {"url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"}, {"url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"}, {"url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"}, {"url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"}, {"url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"}, {"url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"}], "title": "ocfs2: add bounds checking to ocfs2_check_dir_entry()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:59:17.542Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41015", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:24:46.545116Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:34:05.831Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T21:59:17.542Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41015", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:24:46.545116Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:20.616Z"}}], "cna": {"title": "ocfs2: add bounds checking to ocfs2_check_dir_entry()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "13d38c00df97289e6fba2e54193959293fd910d2", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "564d23cc5b216211e1694d53f7e45959396874d0", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "77495e5da5cb110a8fed27b052c77853fe282176", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "fd65685594ee707cbf3ddf22ebb73697786ac114", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "e05a24289db90f76ff606086aadd62d068a88dcd", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "624b380074f0dc209fb8706db3295c735079f34c", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "edb2e67dd4626b06fd7eb37252d5067912e78d59", "versionType": "git"}, {"status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "lessThan": "255547c6bb8940a97eea94ef9d464ea5967763fb", "versionType": "git"}], "programFiles": ["fs/ocfs2/dir.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.24"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.24", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.319", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.281", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.223", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.164", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.102", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.43", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.9.12", "versionType": "semver", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10.2", "versionType": "semver", "lessThanOrEqual": "6.10.*"}, {"status": "unaffected", "version": "6.11", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ocfs2/dir.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"}, {"url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"}, {"url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"}, {"url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"}, {"url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"}, {"url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"}, {"url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"}, {"url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"}, {"url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: add bounds checking to ocfs2_check_dir_entry()\n\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\nocfs2_dir_entry don't stray beyond valid memory region."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.319", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.281", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.223", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.164", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.102", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.43", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.9.12", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.10.2", "versionStartIncluding": "2.6.24"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.11", "versionStartIncluding": "2.6.24"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-01-05T10:37:22.624Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41015", "state": "PUBLISHED", "dateUpdated": "2026-01-05T10:37:22.624Z", "dateReserved": "2024-07-12T12:17:45.612Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-07-29T06:37:01.651Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ocfs2/dir.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "13d38c00df97289e6fba2e54193959293fd910d2", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "564d23cc5b216211e1694d53f7e45959396874d0", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "77495e5da5cb110a8fed27b052c77853fe282176", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "fd65685594ee707cbf3ddf22ebb73697786ac114", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "e05a24289db90f76ff606086aadd62d068a88dcd", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "624b380074f0dc209fb8706db3295c735079f34c", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "edb2e67dd4626b06fd7eb37252d5067912e78d59", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}, {"lessThan": "255547c6bb8940a97eea94ef9d464ea5967763fb", "status": "affected", "version": "23193e513d1cd69411469f028d56fd175d4a6b07", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ocfs2/dir.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.24"}, {"lessThan": "2.6.24", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.319", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.281", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.223", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.164", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.102", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.43", "versionType": "semver"}, {"lessThanOrEqual": "6.9.*", "status": "unaffected", "version": "6.9.12", "versionType": "semver"}, {"lessThanOrEqual": "6.10.*", "status": "unaffected", "version": "6.10.2", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.11", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E857C256-89B3-44DA-B5EC-9C0BC49E368D", "versionEndExcluding": "4.19.319", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92317F4D-6FF1-4A82-8834-52B023F0A242", "versionEndExcluding": "5.4.281", "versionStartIncluding": "4.20", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "12CD4E48-26A1-40B4-AF6A-1CC066193F4C", "versionEndExcluding": "5.10.223", "versionStartIncluding": "5.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D6B1E23-6E6C-4761-ACD4-EA687A95F56F", "versionEndExcluding": "5.15.164", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "DD81B9D5-907B-4C89-A482-4DCE63A05D95", "versionEndExcluding": "6.1.102", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDD6B9FA-1296-4930-9297-583025594F79", "versionEndExcluding": "6.6.43", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "485D2038-744E-4250-A95B-5AFCF6DFC943", "versionEndExcluding": "6.9.12", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "46382BCB-BEE6-47C9-9F1F-92782F199A62", "versionEndExcluding": "6.10.2", "versionStartIncluding": "6.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: add bounds checking to ocfs2_check_dir_entry()\n\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\nocfs2_dir_entry don't stray beyond valid memory region."}, {"lang": "es", "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ocfs2: agregue verificaci\u00f3n de l\u00edmites a ocfs2_check_dir_entry() Esto agrega comprobaciones de sanitizaci\u00f3n para ocfs2_dir_entry para garantizar que todos los miembros de ocfs2_dir_entry no se desv\u00eden m\u00e1s all\u00e1 de la regi\u00f3n de memoria v\u00e1lida."}], "id": "CVE-2024-41015", "lastModified": "2026-08-04T11:19:17.267", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-41015", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-09-10T16:24:46.545116Z", "version": "2.0.3"}}]}, "published": "2024-07-29T07:15:06.033", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/13d38c00df97289e6fba2e54193959293fd910d2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/255547c6bb8940a97eea94ef9d464ea5967763fb"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/53de17ad01cb5f6f8426f597e9d5c87d4cf53bb7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/564d23cc5b216211e1694d53f7e45959396874d0"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/624b380074f0dc209fb8706db3295c735079f34c"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/77495e5da5cb110a8fed27b052c77853fe282176"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e05a24289db90f76ff606086aadd62d068a88dcd"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/edb2e67dd4626b06fd7eb37252d5067912e78d59"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/fd65685594ee707cbf3ddf22ebb73697786ac114"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ocfs2: add bounds checking to ocfs2_check_dir_entry()", "id": "2300298", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300298"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-119", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nocfs2: add bounds checking to ocfs2_check_dir_entry()\nThis adds sanity checks for ocfs2_dir_entry to make sure all members of\nocfs2_dir_entry don't stray beyond valid memory region.", "A vulnerability was found in the OCFS2 filesystem in the Linux Kernel. This issue has been addressed by adding bounds checking to the ocfs2_check_dir_entry() function. This update introduces sanity checks to ensure that all members of the ocfs2_dir_entry structure remain within valid memory regions, preventing out-of-bounds memory access."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2024-41015", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-07-29T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-41015\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-41015\nhttps://lore.kernel.org/linux-cve-announce/2024072910-CVE-2024-41015-e5c0@gregkh/T"], "statement": "Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.", "threat_severity": "Moderate"}

{"created": "2025-07-12T22:09:35.696397+00:00", "updated": "2025-07-12T22:09:35.696457+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}