CVE-2024-39472

Medium

Elevated severity or exploit probability.

CVSS base

7.3 HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

EPSS — probability of exploitation (30 days)

0.3%

16.9th percentile

CISA KEV

Not listed

Weakness / dates

CWE-770

Published 2024-07-05 · modified 2026-08-04

CVSS breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

Attack Vector	L	Local
Attack Complexity	L	Low
Privileges Required	N	None
User Interaction	R	Required
Scope	U	Unchanged
Confidentiality	H	High
Integrity	L	Low
Availability	H	High

Timeline

2024-07-05 — Published (NVD)
2026-08-04 — Last modified (NVD)

Description

In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.

Affected

linux

References

Official: NVD · CVE.org