---
id: CVE-2024-49902
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  jfs: check if leafidx greater than num leaves per dmap tree

  syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater
  than num leaves per dmap tree, add…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  jfs: check if leafidx greater than num leaves per dmap tree

  syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater
  than num leaves per dmap tree, add…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.10.227
  - 'linux_kernel >= 5.11, < 5.15.168'
  - 'linux_kernel >= 5.16, < 6.1.113'
  - 'linux_kernel >= 6.2, < 6.6.55'
  - 'linux_kernel >= 6.7, < 6.10.14'
  - 'linux_kernel >= 6.11, < 6.11.3'
patched:
  - linux_kernel 6.11.3
published: '2024-10-21'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:00.710'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-49902'
references:
  - url: 'https://git.kernel.org/stable/c/058aa89b3318be3d66a103ba7c68d717561e1dc6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2451e5917c56be45d4add786e2a059dd9c2c37c4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/25d2a3ff02f22e215ce53355619df10cc5faa7ab'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/35b91f15f44ce3c01eba058ccb864bb04743e792'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4a7bf6a01fb441009a6698179a739957efd88e38'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7fff9a9f866e99931cf6fa260288e55d01626582'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cb0eb10558802764f07de1dc439c4609e27cb4f0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d64ff0d2306713ff084d4b09f84ed1a8c75ecc32'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d76b9a4c283c7535ae7c7c9b14984e75402951e1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-355557.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00287
epssPercentile: 0.21145
ingestedAt: '2026-10-15T03:30:12.753Z'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-10-22T13:42:45.718739Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

jfs: check if leafidx greater than num leaves per dmap tree

syzbot report a out of bounds in dbSplit, it because dmt_leafidx greater
than num leaves per dmap tree, add a checking for dmt_leafidx in dbFindLeaf.

Shaggy:
Modified sanity check to apply to control pages as well as leaf pages.

## Affected

- `linux_kernel < 5.10.227`
- `linux_kernel >= 5.11, < 5.15.168`
- `linux_kernel >= 5.16, < 6.1.113`
- `linux_kernel >= 6.2, < 6.6.55`
- `linux_kernel >= 6.7, < 6.10.14`
- `linux_kernel >= 6.11, < 6.11.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.11.3`