CVE-2024-50179

Summary

In the Linux kernel, the following vulnerability has been resolved:

ceph: remove the incorrect Fw reference check when dirtying pages

When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < c26c5ec832dd9e9dcd0a0a892a485c99889b68f0affected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < 126b567a2ef65fc38a71d832bf1216c56816f231affected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < f55e003d261baa7c57d51ae5c8ec1f5c26a35c89affected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < f863bfd0a2c6c99011c62ea71ac04f8e78707da9affected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < ea98284fc4fb05f276737d2043b02b62be5a8dfbaffected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < 11ab19d48ab877430eed0c7d83810970bbcbc4f6affected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < 9d4f619153bab7fa59736462967821d6521a38cbaffected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < 74b302ebad5b43ac17460fa58092d892a3cba6ebaffected
LinuxLinux5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 < c08dfb1b49492c09cf13838c71897493ea3b424eaffected
LinuxLinux4.2affected
LinuxLinux0 < 4.2unaffected
LinuxLinux4.19.323 <= 4.19.*unaffected
LinuxLinux5.4.285 <= 5.4.*unaffected
LinuxLinux5.10.227 <= 5.10.*unaffected
LinuxLinux5.15.168 <= 5.15.*unaffected
LinuxLinux6.1.113 <= 6.1.*unaffected
LinuxLinux6.6.55 <= 6.6.*unaffected
LinuxLinux6.10.14 <= 6.10.*unaffected
LinuxLinux6.11.3 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References