Riskcovery

CVE-2024-47682

scsi: sd: Fix off-by-one error in sd_read_block_characteristics()

State
Published
Severity
8.6 High
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: sd: Fix off-by-one error in sd_read_block_characteristics()

Ff the device returns page 0xb1 with length 8 (happens with qemu v2.x, for example), sd_read_block_characteristics() may attempt an out-of-bounds memory access when accessing the zoned field at offset 8.

Scores

CVSSScoreVectorSource
3.18.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac to before 60312ae7392f9c75c6591a52fc359cf7f810d48fAffected
  • 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac to before 568c7c4c77eee6df7677bb861b7cee7398a3255dAffected
  • 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac to before a776050373893e4c847a49abeae2ccb581153df0Affected
  • 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac to before 413df704f149dec585df07466d2401bbd1f490a0Affected
  • 7fb019c46eeea4e3cc3ddfd3e01a24e610f34fac to before f81eaf08385ddd474a2f41595a7757502870c0ebAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.