CVE-2024-41016

In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-25)

Published

2024-07-29

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/57a3d89831fcaa2cdbe024b47c7c36d5a56c3637
• https://git.kernel.org/stable/c/af77c4fc1871847b528d58b7fdafb4aa1f6a9262
• https://git.kernel.org/stable/c/c031d286eceb82f72f8623b7f4abd2aa491bfb5e
• https://git.kernel.org/stable/c/c726dea9d0c806d64c26fcef483b1fb9474d8c5e
• https://git.kernel.org/stable/c/cfb926051fab19b10d1e65976211f364aa820180

Check your stackJSON