In the Linux kernel, the following vulnerability has been resolved:
ocfs2: reserve space for inline xattr before attaching reflink tree
One of our customers reported a crash and a corrupted ocfs2 filesystem. The crash was due to the detection of corruption. Upon troubleshooting, the fsck -fn output showed the below corruption
[EXTENTLISTFREE] Extent list in owner 33080590 claims 230 as the next free chain record, but fsck believes the largest valid value is 227. Clamp the next record value? n
The stat output from the debugfs.ocfs2 showed the following corruption where the "Next Free Rec:" had overshot the "Count:" in the root metadata block.
    Inode: 33080590   Mode: 0640   Generation: 2619713622 (0x9c25a856)
    FS Generation: 904309833 (0x35e6ac49)
    CRC32: 00000000   ECC: 0000
    Type: Regular   Attr: 0x0   Flags: Valid
    Dynamic Features: (0x16) HasXattr InlineXattr Refcounted
    Extended Attributes Block: 0  Extended Attributes Inline Size: 256
    User: 0 (root)   Group: 0 (root)   Size: 281320357888
    Links: 1   Clusters: 141738
    ctime: 0x66911b56 0x316edcb8 -- Fri Jul 12 06:02:30.829349048 2024
    atime: 0x66911d6b 0x7f7a28d -- Fri Jul 12 06:11:23.133669517 2024
    mtime: 0x66911b56 0x12ed75d7 -- Fri Jul 12 06:02:30.317552087 2024
    dtime: 0x0 -- Wed Dec 31 17:00:00 1969
    Refcount Block: 2777346
    Last Extblk: 2886943   Orphan Slot: 0
    Sub Alloc Slot: 0   Sub Alloc Bit: 14
    Tree Depth: 1   Count: 227   Next Free Rec: 230
    ## Offset        Clusters       Block#
    0  0             2310           2776351
    1  2310          2139           2777375
    2  4449          1221           2778399
    3  5670          731            2779423
    4  6401          566            2780447
    .......          ....           .......
    .......          ....           .......
The issue was in the reflink workfow while reserving space for inline xattr. The problematic function is ocfs2reflinkxattrinline(). By the time this function is called the reflink tree is already recreated at the destination inode from the source inode. At this point, this function reserves space for inline xattrs at the destination inode without even checking if there is space at the root metadata block. It simply reduces the lcount from 243 to 227 thereby making space of 256 bytes for inline xattr whereas the inode already has extents beyond this index (in this case up to 230), thereby causing corruption.
The fix for this is to reserve space for inline metadata at the destination inode before the reflink tree gets recreated. The customer has verified the fix.
[
    {
        "id": "CVE-2024-49958-0af077dd",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aac31d654a0a31cb0d2fa36ae694f4e164a52707"
    },
    {
        "id": "CVE-2024-49958-0bbf5b9f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c9807c523b4fca81d3e8e864dabc8c806402121"
    },
    {
        "id": "CVE-2024-49958-0ecbeb7e",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637c00e06564a945e9d0edb3d78d362d64935f9f"
    },
    {
        "id": "CVE-2024-49958-17bf22cd",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637c00e06564a945e9d0edb3d78d362d64935f9f"
    },
    {
        "id": "CVE-2024-49958-1a57bc58",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ca60b86f57a4d9648f68418a725b3a7de2816b0"
    },
    {
        "id": "CVE-2024-49958-1e8f10d8",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74364cb578dcc0b6c9109519d19cbe5a56afac9a"
    },
    {
        "id": "CVE-2024-49958-1efa24d0",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c2072f02c0d75802ec28ec703b7d43a0dd008b5"
    },
    {
        "id": "CVE-2024-49958-24c231a0",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@020f5c53c17f66c0a8f2d37dad27ace301b8d8a1"
    },
    {
        "id": "CVE-2024-49958-289f0d89",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aac31d654a0a31cb0d2fa36ae694f4e164a52707"
    },
    {
        "id": "CVE-2024-49958-2a29a482",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c9807c523b4fca81d3e8e864dabc8c806402121"
    },
    {
        "id": "CVE-2024-49958-37be0fe8",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f9a8f3ac65b4147f1a7b6c05fad5192c0e3c3d9"
    },
    {
        "id": "CVE-2024-49958-3b87a5ca",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@020f5c53c17f66c0a8f2d37dad27ace301b8d8a1"
    },
    {
        "id": "CVE-2024-49958-43e691c8",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74364cb578dcc0b6c9109519d19cbe5a56afac9a"
    },
    {
        "id": "CVE-2024-49958-444b28f2",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637c00e06564a945e9d0edb3d78d362d64935f9f"
    },
    {
        "id": "CVE-2024-49958-4b0be784",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96ce4c3537114d1698be635f5e36c62dc49df7a4"
    },
    {
        "id": "CVE-2024-49958-5abc9b63",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c9807c523b4fca81d3e8e864dabc8c806402121"
    },
    {
        "id": "CVE-2024-49958-5bf3891f",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@020f5c53c17f66c0a8f2d37dad27ace301b8d8a1"
    },
    {
        "id": "CVE-2024-49958-67b28307",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ca60b86f57a4d9648f68418a725b3a7de2816b0"
    },
    {
        "id": "CVE-2024-49958-6914304e",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@020f5c53c17f66c0a8f2d37dad27ace301b8d8a1"
    },
    {
        "id": "CVE-2024-49958-69be6e6c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96ce4c3537114d1698be635f5e36c62dc49df7a4"
    },
    {
        "id": "CVE-2024-49958-6a2ffa31",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c2072f02c0d75802ec28ec703b7d43a0dd008b5"
    },
    {
        "id": "CVE-2024-49958-6c4f9cba",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ca60b86f57a4d9648f68418a725b3a7de2816b0"
    },
    {
        "id": "CVE-2024-49958-713247db",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ca60b86f57a4d9648f68418a725b3a7de2816b0"
    },
    {
        "id": "CVE-2024-49958-7f0c8f62",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f9a8f3ac65b4147f1a7b6c05fad5192c0e3c3d9"
    },
    {
        "id": "CVE-2024-49958-812ebbbc",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74364cb578dcc0b6c9109519d19cbe5a56afac9a"
    },
    {
        "id": "CVE-2024-49958-8cd32313",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f9a8f3ac65b4147f1a7b6c05fad5192c0e3c3d9"
    },
    {
        "id": "CVE-2024-49958-9250614e",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c2072f02c0d75802ec28ec703b7d43a0dd008b5"
    },
    {
        "id": "CVE-2024-49958-9910fe67",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637c00e06564a945e9d0edb3d78d362d64935f9f"
    },
    {
        "id": "CVE-2024-49958-9af80147",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "154399625491914784922788583373215816869",
                "30005725651359138929365412876265802533",
                "27813625959630579377856951782228190400",
                "230218700405702115472099916294065232782",
                "314001650795811730294442315755089198468",
                "307695193978920429164445836049505358233",
                "182245706089779855565534968391575014506",
                "192882322013323884049585981779614294553",
                "199401711229733078039724344341799712900",
                "1158995211097238440616891686133835916",
                "85281877546458529435998500861528188564",
                "59364209066162447427460820817789688353",
                "98827551930000305166424366563478731460",
                "277254620188225216846898378329380306999",
                "227956266286982129502549281604379101173",
                "114995479108605880385337886947227643691"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96ce4c3537114d1698be635f5e36c62dc49df7a4"
    },
    {
        "id": "CVE-2024-49958-9d15cf2d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c9807c523b4fca81d3e8e864dabc8c806402121"
    },
    {
        "id": "CVE-2024-49958-9e562a81",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@74364cb578dcc0b6c9109519d19cbe5a56afac9a"
    },
    {
        "id": "CVE-2024-49958-a2440d9a",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aac31d654a0a31cb0d2fa36ae694f4e164a52707"
    },
    {
        "id": "CVE-2024-49958-b25aab72",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "20536838027134132458486330868890700215",
                "227187471757337364083274331909275120508",
                "330406443447699301982078142462844409821",
                "263880939973549680571262648826470613915",
                "89128794188133905800901267080798961138",
                "65801142527215021388348919721359112194",
                "265710785394604029588670043394017922410",
                "175467368997767501726583245855626302192",
                "77998187659436379308026175230860488991"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "fs/ocfs2/xattr.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96ce4c3537114d1698be635f5e36c62dc49df7a4"
    },
    {
        "id": "CVE-2024-49958-c9f6b966",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "269005534610057015902952685002048573523",
            "length": 1138.0
        },
        "target": {
            "file": "fs/ocfs2/refcounttree.c",
            "function": "__ocfs2_reflink"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c2072f02c0d75802ec28ec703b7d43a0dd008b5"
    },
    {
        "id": "CVE-2024-49958-df2bdd0c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aac31d654a0a31cb0d2fa36ae694f4e164a52707"
    },
    {
        "id": "CVE-2024-49958-fd0a0ca1",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "207062810067186771166971292907598644219",
            "length": 1857.0
        },
        "target": {
            "file": "fs/ocfs2/xattr.c",
            "function": "ocfs2_reflink_xattr_inline"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f9a8f3ac65b4147f1a7b6c05fad5192c0e3c3d9"
    }
]