Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-49902 Details

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf. Shaggy: Modified sanity check to apply to control pages as well as leaf pages.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-265688.html	siemens-SADP
https://cert-portal.siemens.com/productcert/html/ssa-355557.html	siemens-SADP
https://git.kernel.org/stable/c/058aa89b3318be3d66a103ba7c68d717561e1dc6	kernel.org	Patch
https://git.kernel.org/stable/c/2451e5917c56be45d4add786e2a059dd9c2c37c4	kernel.org	Patch
https://git.kernel.org/stable/c/25d2a3ff02f22e215ce53355619df10cc5faa7ab	kernel.org	Patch
https://git.kernel.org/stable/c/35b91f15f44ce3c01eba058ccb864bb04743e792	kernel.org	Patch
https://git.kernel.org/stable/c/4a7bf6a01fb441009a6698179a739957efd88e38	kernel.org	Patch
https://git.kernel.org/stable/c/7fff9a9f866e99931cf6fa260288e55d01626582	kernel.org	Patch
https://git.kernel.org/stable/c/cb0eb10558802764f07de1dc439c4609e27cb4f0	kernel.org	Patch
https://git.kernel.org/stable/c/d64ff0d2306713ff084d4b09f84ed1a8c75ecc32	kernel.org	Patch
https://git.kernel.org/stable/c/d76b9a4c283c7535ae7c7c9b14984e75402951e1	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html	CVE
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	CVE

see all 13 references

Weakness Enumeration

CWE-ID	CWE Name	Source
NVD-CWE-noinfo	Insufficient Information to Classify Weakness	[email protected]

Affected Products

Product	Versions
linux linux kernel	< 5.10.227 >= 5.11, < 5.15.168 >= 5.16, < 6.1.113 >= 6.2, < 6.6.55 >= 6.7, < 6.10.14
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Aug 4, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	siemens-SADP
May 12, 2026	CVE Modified	siemens-SADP
Nov 3, 2025	CVE Modified	CVE
Nov 3, 2025	CVE Modified	CVE
Nov 13, 2024	Initial Analysis	[email protected]
Nov 8, 2024	CVE Modified	kernel.org
Oct 21, 2024	New CVE Received	kernel.org