PT-2024-41623 · 'Русбитех Астра'+4 · Astra Linux Special Edition+11

Published 2024-07-01 · Updated 2024-07-01

BDU

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:C

Уязвимость функции xfs dir3 data check() (fs/xfs/libxfs/xfs dir2 data.c) ядра операционной системы Linux связана с чтением данных за границами буфера в памяти. Эксплуатация уязвимости позволяет нарушителю вызвать отказ в обслуживании

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15111

Affected Products

Astra Linux Special Edition

Debian

Linux

Opensuse Leap

Red Hat

Suse Liberty Linux

Suse Linux Enterprise Server For Sap Applications

Suse Linux Micro

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Ubuntu

Opensuse Leap Micro

References · 14

• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41013 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-41013 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15111 · Security Note
• https://github.com/torvalds/linux/commit/0c7fcdb6d06cdf8b19b57c17605215b06afa864a · Note
• https://git.kernel.org/linus/0c7fcdb6d06cdf8b19b57c17605215b06afa864a · Note
• https://git.kernel.org/stable/c/b0932e4f9da85349d1c8f2a77d2a7a7163b8511d · Note
• https://access.redhat.com/security/cve/cve-2024-41013 · Note
• https://lore.kernel.org/linux-cve-announce/2024072908-CVE-2024-41013-2996@gregkh/T/#u · Note
• https://suse.com/security/cve/CVE-2024-41013.html · Note
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html · Note
• https://git.kernel.org/stable/c/ca96d83c93071f95cf962ce92406621a472df31b · Note
• https://cybersecurity-help.cz/vdb/SB2024100702 · Note