PT-2024-31315 · Linux+7 · Linux Kernel+7

Published 2024-06-25 · Updated 2026-01-12 · CVE-2024-44938

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a shift-out-of-bounds error in the dbDiscardAG function of the jfs module. When searching for the next smaller log2 block, the BLKSTOL2() function returned 0, causing a shift exponent of -1 to be negative. This patch fixes the issue by exiting the loop directly when a negative shift is found.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

CWE-682

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13260

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-49111

BDU:2025-03152

CVE-2024-44938

DLA-4008-1

DLA-4178-1

DSA-5782-1

MGASA-2024-0309

MGASA-2024-0310

OESA-2024-2076

OESA-2024-2106

OESA-2024-2107

OESA-2024-2108

OPENSUSE-SU-2024_3190-1

OPENSUSE-SU-2024_3209-1

OPENSUSE-SU-2024_3408-1

OPENSUSE-SU-2024_3483-1

SUSE-SU-2024:3190-1

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3209-1

SUSE-SU-2024:3227-1

SUSE-SU-2024:3383-1

SUSE-SU-2024:3408-1

SUSE-SU-2024:3483-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-7154-1

USN-7154-2

USN-7155-1

USN-7156-1

USN-7196-1

USN-7332-1

USN-7332-2

USN-7332-3

USN-7342-1

USN-7344-1

USN-7344-2

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7391-1

USN-7392-1

USN-7392-2

USN-7392-3

USN-7392-4

USN-7393-1

USN-7401-1

USN-7407-1

USN-7413-1

USN-7421-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7463-1

USN-7539-1

USN-7540-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2623

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44938.json · Exploit
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3408-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-41082 · Security Note
• https://ubuntu.com/security/CVE-2024-46803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52906 · Security Note
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41087 · Security Note
• https://ubuntu.com/security/CVE-2024-46751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53103 · Vendor Advisory