cve 2024 40902

The tag CVE-2024-40902 covers a Linux kernel vulnerability in the JFS filesystem's extended attribute (xattr) handling. Identified and patched in mid-2024, this flaw allows a buffer overflow when a malformed xattr triggers the kernel to hex-dump more data than the allocated buffer can hold. The issue is local in attack vector but carries high impact, potentially leading to memory corruption, kernel instability, or privilege escalation. The tag includes discussion of the upstream fix, syzkaller discovery, and guidance for applying the patch to affected systems. It is relevant for Linux system administrators and security professionals managing kernel updates.