CVE - CVE-2024-50218

CVE-ID
CVE-2024-50218	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int". So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0b6b8c2055784261de3fb641c5d0d63964318e8f URL:https://git.kernel.org/stable/c/0b6b8c2055784261de3fb641c5d0d63964318e8f MISC:https://git.kernel.org/stable/c/27d95867bee806cdc448d122bd99f1d8b0544035 URL:https://git.kernel.org/stable/c/27d95867bee806cdc448d122bd99f1d8b0544035 MISC:https://git.kernel.org/stable/c/2fe5d62e122b040ce7fc4d31aa7fa96ae328cefc URL:https://git.kernel.org/stable/c/2fe5d62e122b040ce7fc4d31aa7fa96ae328cefc MISC:https://git.kernel.org/stable/c/70767689ec6ee5f05fb0a2c17d7ec1927946e486 URL:https://git.kernel.org/stable/c/70767689ec6ee5f05fb0a2c17d7ec1927946e486 MISC:https://git.kernel.org/stable/c/88f97a4b5843ce21c1286e082c02a5fb4d8eb473 URL:https://git.kernel.org/stable/c/88f97a4b5843ce21c1286e082c02a5fb4d8eb473 MISC:https://git.kernel.org/stable/c/95fbed8ae8c32c0977e6be1721c190d8fea23f2f URL:https://git.kernel.org/stable/c/95fbed8ae8c32c0977e6be1721c190d8fea23f2f MISC:https://git.kernel.org/stable/c/bc0a2f3a73fcdac651fca64df39306d1e5ebe3b0 URL:https://git.kernel.org/stable/c/bc0a2f3a73fcdac651fca64df39306d1e5ebe3b0 MISC:https://git.kernel.org/stable/c/ecd62f684386fa64f9c0cea92eea361f4e6444c2 URL:https://git.kernel.org/stable/c/ecd62f684386fa64f9c0cea92eea361f4e6444c2
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)