NetSight
IP …
medium5.5

CVE-2024-50272

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value…

Impact

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.16.40 before 3.17
from 4.7.10 before 4.8
from 4.8.4 before 4.9
from 4.9 before 6.1.117
from 6.2 before 6.6.61
from 6.7 before 6.11.8

Weakness classification

CWE-835

References