Riskcovery

CVE-2024-36917

block: fix overflow in blk_ioctl_discard()

State
Published
Severity
Not scored
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix overflow in blk_ioctl_discard()

There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000; Add the overflow validation now.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to before 8a26198186e97ee5fc4b42fde82629cff8c75cd6Affected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to before e1d38cde2b7b0fbd1c48082e7a98c37d750af59bAffected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to before 507d526a98c355e6f3fb2c47aacad44a69784beeAffected
  • d30a2605be9d5132d95944916e8f578fcfe4f976 to before 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155Affected
LinuxLinux
  • 2.6.28Affected
  • before 2.6.28Not affected
  • 6.1.91 through 6.1.*Not affected
  • 6.6.31 through 6.6.*Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.