Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36917

block: fix overflow in blk_ioctl_discard()

Description

In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000; Add the overflow validation now.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d30a2605be9d5132d95944916e8f578fcfe4f976 to < 8a26198186e97ee5fc4b42fde82629cff8c75cd6affected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to < e1d38cde2b7b0fbd1c48082e7a98c37d750af59baffected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to < 507d526a98c355e6f3fb2c47aacad44a69784beeaffected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to < 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155affected

Linux Linux

Default version status: affected

  • 2.6.28affected
  • 0 to < 2.6.28unaffected
  • 6.1.91 to ≤ 6.1.*unaffected
  • 6.6.31 to ≤ 6.6.*unaffected
  • 6.8.10 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References