Threats tagged 'ghsa-27qw-rmpj-379q'

CVE-2024-44939 is a medium severity vulnerability in the Linux kernel's JFS filesystem code. It involves a null pointer dereference in the dtInsertEntry function, which can cause a general protection fault and kernel crash. The flaw arises when a pointer comparison leads to clearing a flag incorrectly, causing the code to access an uninitialized object. This issue was reported by syzbot and affects kernel versions including 6.8.0-syzkaller-08951-gfe46a7dd189e. The fix involves checking a freelist before proceeding in dtInsertEntry and returning an error if the freelist is empty.