Linux · Linux Kernel · CVE-2024-47670
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.6.58
**Description**
The issue is related to the ocfs2 xattr find entry() function in the Linux kernel's ocfs2 file system module, which is vulnerable to out-of-bounds memory access. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be exploited by crafted images, and a paranoia check has been added to prevent out-of-bound access.
**Recommendations**
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the ocfs2 file system module until a patch is available.