In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/22dcbf7661c6ffc3247978c254dc40b833a0d429 cve-icon cve-icon
https://git.kernel.org/stable/c/25f1e673ef61d6bf9a6022e27936785896d74948 cve-icon cve-icon
https://git.kernel.org/stable/c/2eea5fda5556ef03defebf07b0a12fcd2c5210f4 cve-icon cve-icon
https://git.kernel.org/stable/c/823d573f5450ca6be80b36f54d1902ac7cd23fb9 cve-icon cve-icon
https://git.kernel.org/stable/c/8c97a4d5463a1c972ef576ac499ea9b05f956097 cve-icon cve-icon
https://git.kernel.org/stable/c/ca84a2c9be482836b86d780244f0357e5a778c46 cve-icon cve-icon
https://git.kernel.org/stable/c/fd993b2180b4c373af8b99aa28d4dcda5c2a8f10 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024122702-CVE-2024-56598-3955@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56598 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56598 cve-icon
History

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 25 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Important

 threat_severity

Moderate

Mon, 24 Feb 2025 02:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Moderate

 threat_severity

Important

Thu, 16 Jan 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-129
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 30 Dec 2024 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Dec 2024 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.
Title jfs: array-index-out-of-bounds fix in dtReadFirst
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-27T14:51:04.988Z

Updated: 2025-10-01T20:07:13.876Z

Reserved: 2024-12-27T14:03:06.010Z

Link: CVE-2024-56598

cve-icon Vulnrichment

Updated: 2025-10-01T15:42:49.580Z

cve-icon NVD

Status : Modified

Published: 2024-12-27T15:15:19.200

Modified: 2025-10-01T20:17:30.460

Link: CVE-2024-56598

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-56598 - Bugzilla