CVE-2024-50179

ceph: remove the incorrect Fw reference check when dirtying pages

State: Published
Severity: 5.5 Medium
Published: Nov 8, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ceph: remove the incorrect Fw reference check when dirtying pages

When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before c26c5ec832dd9e9dcd0a0a892a485c99889b68f0Affected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 126b567a2ef65fc38a71d832bf1216c56816f231Affected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before f55e003d261baa7c57d51ae5c8ec1f5c26a35c89Affected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before f863bfd0a2c6c99011c62ea71ac04f8e78707da9Affected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before ea98284fc4fb05f276737d2043b02b62be5a8dfbAffected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 11ab19d48ab877430eed0c7d83810970bbcbc4f6Affected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 9d4f619153bab7fa59736462967821d6521a38cbAffected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 74b302ebad5b43ac17460fa58092d892a3cba6ebAffected 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before c08dfb1b49492c09cf13838c71897493ea3b424eAffected
LinuxLinux	4.2Affected before 4.2Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before c26c5ec832dd9e9dcd0a0a892a485c99889b68f0Affected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 126b567a2ef65fc38a71d832bf1216c56816f231Affected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before f55e003d261baa7c57d51ae5c8ec1f5c26a35c89Affected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before f863bfd0a2c6c99011c62ea71ac04f8e78707da9Affected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before ea98284fc4fb05f276737d2043b02b62be5a8dfbAffected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 11ab19d48ab877430eed0c7d83810970bbcbc4f6Affected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 9d4f619153bab7fa59736462967821d6521a38cbAffected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before 74b302ebad5b43ac17460fa58092d892a3cba6ebAffected
5dda377cf0a6bd43f64a3c1efb670d7c668e7b29 to before c08dfb1b49492c09cf13838c71897493ea3b424eAffected

LinuxLinux

4.2Affected
before 4.2Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.