Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-50091

dm vdo: don't refer to dedupe_context after releasing it

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupe_context after releasing it Clear the dedupe_context pointer in a data_vio whenever ownership of the context is lost, so that vdo can't examine it accidentally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cfaf07fae7a262865a67b6010eef3bc0a1ae50b2 to < 63ef073084c67878d7a92e15ad055172da3f05a3affected
  • cfaf07fae7a262865a67b6010eef3bc0a1ae50b2 to < 0808ebf2f80b962e75741a41ced372a7116f1e26affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.11.4 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References