CVE-2024-36917

Summary

In the Linux kernel, the following vulnerability has been resolved:

block: fix overflow in blk_ioctl_discard()

There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000; Add the overflow validation now.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd30a2605be9d5132d95944916e8f578fcfe4f976 < 8a26198186e97ee5fc4b42fde82629cff8c75cd6affected
LinuxLinuxd30a2605be9d5132d95944916e8f578fcfe4f976 < e1d38cde2b7b0fbd1c48082e7a98c37d750af59baffected
LinuxLinuxd30a2605be9d5132d95944916e8f578fcfe4f976 < 507d526a98c355e6f3fb2c47aacad44a69784beeaffected
LinuxLinuxd30a2605be9d5132d95944916e8f578fcfe4f976 < 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155affected
LinuxLinux2.6.28affected
LinuxLinux0 < 2.6.28unaffected
LinuxLinux6.1.91 <= 6.1.*unaffected
LinuxLinux6.6.31 <= 6.6.*unaffected
LinuxLinux6.8.10 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References