Answer in brief
CVE-2024-47670 records a Unknown severity vulnerability in ocfs2: add bounds checking to ocfs2_xattr_find_entry(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-47670 records a Unknown severity vulnerability in ocfs2: add bounds checking to ocfs2_xattr_find_entry(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=cf1d6c763fbcb115263114302485ad17e7933d87 <b49a786beb11ff740cb9e0c20b999c2a0e1729c2 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <60c0d36189bad58b1a8e69af8781d90009559ea1 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <34759b7e4493d7337cbc414c132cef378c492a2c || >=cf1d6c763fbcb115263114302485ad17e7933d87 <5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd || >=cf1d6c763fbcb115263114302485ad17e7933d87 <9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f || >=cf1d6c763fbcb115263114302485ad17e7933d87 <1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <8e7bef408261746c160853fc27df3139659f5f77 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <9e3041fecdc8f78a5900c3aa51d3d756e73264d6 | b49a786beb11ff740cb9e0c20b999c2a0e1729c2, 60c0d36189bad58b1a8e69af8781d90009559ea1, 34759b7e4493d7337cbc414c132cef378c492a2c, 5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd, 9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f, 1f6e167d6753fe3ea493cdc7f7de8d03147a4d39, 8e7bef408261746c160853fc27df3139659f5f77, 9e3041fecdc8f78a5900c3aa51d3d756e73264d6 |
| Linux/Linuxgeneric | 2.6.28 | Not reported |
Published upstream
Oct 9, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=cf1d6c763fbcb115263114302485ad17e7933d87 <b49a786beb11ff740cb9e0c20b999c2a0e1729c2 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <60c0d36189bad58b1a8e69af8781d90009559ea1 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <34759b7e4493d7337cbc414c132cef378c492a2c || >=cf1d6c763fbcb115263114302485ad17e7933d87 <5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd || >=cf1d6c763fbcb115263114302485ad17e7933d87 <9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f || >=cf1d6c763fbcb115263114302485ad17e7933d87 <1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <8e7bef408261746c160853fc27df3139659f5f77 || >=cf1d6c763fbcb115263114302485ad17e7933d87 <9e3041fecdc8f78a5900c3aa51d3d756e73264d6 | b49a786beb11ff740cb9e0c20b999c2a0e1729c2, 60c0d36189bad58b1a8e69af8781d90009559ea1, 34759b7e4493d7337cbc414c132cef378c492a2c, 5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd, 9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f, 1f6e167d6753fe3ea493cdc7f7de8d03147a4d39, 8e7bef408261746c160853fc27df3139659f5f77, 9e3041fecdc8f78a5900c3aa51d3d756e73264d6 |
| Linux/Linuxgeneric | 2.6.28 | Not reported |
Published upstream
Oct 9, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
Quoted source text, attributed separately from HOL analysis.