PT-2024-36852 · Linux+7 · Linux Kernel+7

Published 2024-12-27 · Updated 2026-03-24 · CVE-2024-56548

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem was fixed in the Linux kernel related to the hfsplus file system. The issue happened when the device's block size changed, potentially causing out-of-bounds writes when hfsplus read wrapper calls hfsplus submit bio and the latter function reads a different io size. The vulnerability may cause other issues like IO being rejected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Use After Free

Weakness Enumeration

CWE-787

CWE-416

Related Identifiers

ALT-PU-2025-12647

BDU:2025-04454

CVE-2024-56548

DLA-4075-1

DLA-4076-1

OESA-2025-1032

OESA-2025-1033

OESA-2025-1035

OESA-2025-1036

OESA-2025-1037

OESA-2025-1282

OPENSUSE-SU-2025_0201-1

OPENSUSE-SU-2025_0202-1

OPENSUSE-SU-2025_0203-1

OPENSUSE-SU-2025_0229-1

OPENSUSE-SU-2025_0428-1

OPENSUSE-SU-2025_0499-1

OPENSUSE-SU-2025_0557-1

OPENSUSE-SU-2025_0833-1

OPENSUSE-SU-2025_0835-1

OPENSUSE-SU-2025_0847-1

OPENSUSE-SU-2025_0853-1

OPENSUSE-SU-2025_0855-1

OPENSUSE-SU-2025_0856-1

OPENSUSE-SU-2025_0955-1

SUSE-SU-2025:0152-1

SUSE-SU-2025:0201-1

SUSE-SU-2025:0201-2

SUSE-SU-2025:0202-1

SUSE-SU-2025:0203-1

SUSE-SU-2025:0229-1

SUSE-SU-2025:0230-1

SUSE-SU-2025:0231-1

SUSE-SU-2025:0236-1

SUSE-SU-2025:0289-1

SUSE-SU-2025:0428-1

SUSE-SU-2025:0499-1

SUSE-SU-2025:0557-1

SUSE-SU-2025:0603-1

SUSE-SU-2025:0784-1

SUSE-SU-2025:0833-1

SUSE-SU-2025:0833-2

SUSE-SU-2025:0834-1

SUSE-SU-2025:0835-1

SUSE-SU-2025:0847-1

SUSE-SU-2025:0853-1

SUSE-SU-2025:0855-1

SUSE-SU-2025:0856-1

SUSE-SU-2025:0867-1

SUSE-SU-2025:0945-1

SUSE-SU-2025:0955-1

SUSE-SU-2025:20165-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20248-1

SUSE-SU-2025:20249-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_0201-1

SUSE-SU-2025_0201-2

SUSE-SU-2025_0202-1

SUSE-SU-2025_0203-1

SUSE-SU-2025_0236-1

SUSE-SU-2025_0428-1

SUSE-SU-2025_0499-1

SUSE-SU-2025_0557-1

SUSE-SU-2025_0833-1

SUSE-SU-2025_0833-2

SUSE-SU-2025_0834-1

SUSE-SU-2025_0835-1

SUSE-SU-2025_0847-1

SUSE-SU-2025_0855-1

SUSE-SU-2025_0856-1

SUSE-SU-2025_0955-1

USN-7276-1

USN-7277-1

USN-7310-1

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7391-1

USN-7392-1

USN-7392-2

USN-7392-3

USN-7392-4

USN-7393-1

USN-7401-1

USN-7407-1

USN-7413-1

USN-7421-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7463-1

USN-7468-1

USN-7523-1

USN-7524-1

USN-7539-1

USN-7540-1

USN-8070-1

USN-8070-2

USN-8070-3

USN-8112-1

USN-8112-2

USN-8112-3

USN-8112-4

USN-8112-5

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 4032

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/56xxx/CVE-2024-56548.json · Exploit
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50224 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21649 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21718 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7393-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53136 · Security Note
• https://ubuntu.com/security/CVE-2024-53079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56656 · Vendor Advisory