In the Linux kernel, the following vulnerability has been resolved:
jfs: check if leafidx greater than num leaves per dmap tree
syzbot report a out of bounds in dbSplit, it because dmtleafidx greater than num leaves per dmap tree, add a checking for dmtleafidx in dbFindLeaf.
Shaggy: Modified sanity check to apply to control pages as well as leaf pages.
[ { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25d2a3ff02f22e215ce53355619df10cc5faa7ab", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-0d05270d", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fff9a9f866e99931cf6fa260288e55d01626582", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-145134f7", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7fff9a9f866e99931cf6fa260288e55d01626582", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-14e3e65e", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2451e5917c56be45d4add786e2a059dd9c2c37c4", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-222ca7c0", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d64ff0d2306713ff084d4b09f84ed1a8c75ecc32", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-27696d9a", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35b91f15f44ce3c01eba058ccb864bb04743e792", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-2a7765c4", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@25d2a3ff02f22e215ce53355619df10cc5faa7ab", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-2a8124a2", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76b9a4c283c7535ae7c7c9b14984e75402951e1", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-396978f4", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@058aa89b3318be3d66a103ba7c68d717561e1dc6", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-3bfd9678", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a7bf6a01fb441009a6698179a739957efd88e38", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-589f8615", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0eb10558802764f07de1dc439c4609e27cb4f0", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-65329205", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35b91f15f44ce3c01eba058ccb864bb04743e792", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-75ca0170", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d64ff0d2306713ff084d4b09f84ed1a8c75ecc32", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-c392b9d6", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a7bf6a01fb441009a6698179a739957efd88e38", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-cc4c9d71", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "line_hashes": [ "324206275795120080037708484469238468591", "117022611753787849294459788057719225506", "178364187566434841877223349890761038876", "9009191778701929019240255096454185994", "328186193289896949035058623033457319623", "18327143276943224745845393037327114525", "167069507730694413451003851660317231185", "132626338407500995268375408135356938911", "76623055390256194127801721753138180511" ], "threshold": 0.9 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d76b9a4c283c7535ae7c7c9b14984e75402951e1", "signature_type": "Line", "signature_version": "v1", "id": "CVE-2024-49902-ce09f003", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb0eb10558802764f07de1dc439c4609e27cb4f0", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-ddd4a86f", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@058aa89b3318be3d66a103ba7c68d717561e1dc6", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-eb2aa239", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } }, { "digest": { "function_hash": "133251604943931705173951184977680476801", "length": 597.0 }, "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2451e5917c56be45d4add786e2a059dd9c2c37c4", "signature_type": "Function", "signature_version": "v1", "id": "CVE-2024-49902-f1ed16e1", "target": { "function": "dbFindLeaf", "file": "fs/jfs/jfs_dmap.c" } } ]