VDB

CVE-2024-56598

CVE-2024-56598 PUBLISHED CVSS 7.1 HIGH

jfs: array-index-out-of-bounds fix in dtReadFirst

Reported by linux · Published December 27, 2024

In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.

Risk scores

CVSS 3.1
7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected products

VendorProductVersions
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
LinuxLinux2.6.12, 0, 5.4.287
linuxlinux_kernel2.6.12, 2.6.12, 2.6.12
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Timeline

  • Dec 27, 2024 CVE Published
  • Dec 28, 2024 EPSS Score (30 in total, the first dated here)
  • Dec 28, 2024 Coalition ESS Score (8 in total, the first dated here)
  • Dec 16, 2025 PoC Published
  • Dec 29, 2025 Security Advisory (435 in total, the first dated here)
  • Apr 29, 2026 Distribution Patch (353 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-56598
vulnetix vdb fixes CVE-2024-56598

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-56598/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›