CVE-2024-50184

virtio_pmem: Check device status before requesting flush

State: Published
Severity: 5.5 Medium
Published: Nov 8, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_pmem: Check device status before requesting flush

If a pmem device is in a bad status, the driver side could wait for host ack forever in virtio_pmem_flush(), causing the system to hang.

So add a status check in the beginning of virtio_pmem_flush() to return early if the device is not activated.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-754 Improper Check for Unusual or Exceptional Conditions

Affected Products

Product	Versions
LinuxLinux	6e84200c0a2994b991259d19450eee561029bf70 to before 59ac565c6277d4be6661e81ea6a7f3ca2c5e4e36Affected 6e84200c0a2994b991259d19450eee561029bf70 to before 4ce662fe4be6fbc2595d9ef4888b2b6e778c99edAffected 6e84200c0a2994b991259d19450eee561029bf70 to before 9a2bc9b6f929a2ce1ebe4d1a796ddab37568c5b4Affected 6e84200c0a2994b991259d19450eee561029bf70 to before 6a5ca0ab94e13a1474bf7ad8437a975c2193618fAffected 6e84200c0a2994b991259d19450eee561029bf70 to before b01793cc63dd39c8f12b9a3d8dc115fbebb19e2aAffected 6e84200c0a2994b991259d19450eee561029bf70 to before ce7a3a62cc533c922072f328fd2ea2fd7cb893d4Affected 6e84200c0a2994b991259d19450eee561029bf70 to before e25fbcd97cf52c3c9824d44b5c56c19673c3dd50Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.57 through 6.6.Not affected 6.11.4 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

6e84200c0a2994b991259d19450eee561029bf70 to before 59ac565c6277d4be6661e81ea6a7f3ca2c5e4e36Affected
6e84200c0a2994b991259d19450eee561029bf70 to before 4ce662fe4be6fbc2595d9ef4888b2b6e778c99edAffected
6e84200c0a2994b991259d19450eee561029bf70 to before 9a2bc9b6f929a2ce1ebe4d1a796ddab37568c5b4Affected
6e84200c0a2994b991259d19450eee561029bf70 to before 6a5ca0ab94e13a1474bf7ad8437a975c2193618fAffected
6e84200c0a2994b991259d19450eee561029bf70 to before b01793cc63dd39c8f12b9a3d8dc115fbebb19e2aAffected
6e84200c0a2994b991259d19450eee561029bf70 to before ce7a3a62cc533c922072f328fd2ea2fd7cb893d4Affected
6e84200c0a2994b991259d19450eee561029bf70 to before e25fbcd97cf52c3c9824d44b5c56c19673c3dd50Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.57 through 6.6.*Not affected
6.11.4 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.