In the Linux kernel, the following vulnerability has been resolved:

jfs: array-index-out-of-bounds fix in dtReadFirst

The value of stbl can be sometimes out of bounds due
to a bad filesystem. Added a check with appopriate return
of error code in that case.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00011.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 25f1e673ef61d6bf9a6022e27936785896d74948
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 8c97a4d5463a1c972ef576ac499ea9b05f956097
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 823d573f5450ca6be80b36f54d1902ac7cd23fb9
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 2eea5fda5556ef03defebf07b0a12fcd2c5210f4
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< fd993b2180b4c373af8b99aa28d4dcda5c2a8f10
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< 22dcbf7661c6ffc3247978c254dc40b833a0d429
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected
< ca84a2c9be482836b86d780244f0357e5a778c46
Linux Linux affected
Version Status Constraints
2.6.12 affected
—
0 unaffected
< 2.6.12
5.4.287 unaffected
≤ 5.4.*
5.10.231 unaffected
≤ 5.10.*
5.15.174 unaffected
≤ 5.15.*
6.1.120 unaffected
≤ 6.1.*
6.6.66 unaffected
≤ 6.6.*
6.12.5 unaffected
≤ 6.12.*
6.13 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4075-1 linux security update
Debian DLA Debian DLA DLA-4076-1 linux-6.1 security update
EUVD EUVD EUVD-2024-53246 In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.
Ubuntu USN Ubuntu USN USN-7379-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7379-2 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7380-1 Linux kernel (Low Latency) vulnerabilities
Ubuntu USN Ubuntu USN USN-7381-1 Linux kernel (Low Latency) vulnerabilities
Ubuntu USN Ubuntu USN USN-7382-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-7387-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7387-2 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7387-3 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-7388-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7389-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-7390-1 Linux kernel (Xilinx ZynqMP) vulnerabilities
Ubuntu USN Ubuntu USN USN-7391-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7392-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7392-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7392-3 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7392-4 Linux kernel (AWS FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7393-1 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7401-1 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7402-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7402-2 Linux kernel (Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-7402-3 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-7402-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7402-5 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-7403-1 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-7407-1 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-7413-1 Linux kernel (IoT) vulnerabilities
Ubuntu USN Ubuntu USN USN-7421-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7451-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7458-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-7459-1 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-7459-2 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-7463-1 Linux kernel (IBM) vulnerabilities
Ubuntu USN Ubuntu USN USN-7468-1 Linux kernel (Azure, N-Series) vulnerabilities
Ubuntu USN Ubuntu USN USN-7496-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7496-2 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7496-3 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7496-4 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7496-5 Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7498-1 Linux kernel vulnerability
Ubuntu USN Ubuntu USN USN-7506-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7506-2 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7506-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7506-4 Linux kernel (Xenial HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-7523-1 Linux kernel (Raspberry Pi Real-time) vulnerabilities
Ubuntu USN Ubuntu USN USN-7524-1 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7539-1 Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN Ubuntu USN USN-7540-1 Linux kernel (Raspberry Pi) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/22dcbf7661c6ffc3247978c254dc40b833a0d429 cve-icon cve-icon
https://git.kernel.org/stable/c/25f1e673ef61d6bf9a6022e27936785896d74948 cve-icon cve-icon
https://git.kernel.org/stable/c/2eea5fda5556ef03defebf07b0a12fcd2c5210f4 cve-icon cve-icon
https://git.kernel.org/stable/c/823d573f5450ca6be80b36f54d1902ac7cd23fb9 cve-icon cve-icon
https://git.kernel.org/stable/c/8c97a4d5463a1c972ef576ac499ea9b05f956097 cve-icon cve-icon
https://git.kernel.org/stable/c/ca84a2c9be482836b86d780244f0357e5a778c46 cve-icon cve-icon
https://git.kernel.org/stable/c/fd993b2180b4c373af8b99aa28d4dcda5c2a8f10 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024122702-CVE-2024-56598-3955@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56598 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56598 cve-icon
History

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 25 Feb 2025 02:15:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Important

 threat_severity

Moderate

Mon, 24 Feb 2025 02:30:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Moderate

 threat_severity

Important

Thu, 16 Jan 2025 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-129
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Mon, 30 Dec 2024 01:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Dec 2024 15:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case.
Title jfs: array-index-out-of-bounds fix in dtReadFirst
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:56:02.661Z

Reserved: 2024-12-27T14:03:06.010Z

Link: CVE-2024-56598

cve-icon Vulnrichment

Updated: 2025-11-03T20:50:33.896Z

cve-icon NVD

Status : Modified

Published: 2024-12-27T15:15:19.200

Modified: 2025-11-03T21:18:03.820

Link: CVE-2024-56598

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-12-27T00:00:00Z

Links: CVE-2024-56598 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses