CVE-2024-50218

ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow

State: Published
Severity: Not scored
Published: Nov 9, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow

Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int".

So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 27d95867bee806cdc448d122bd99f1d8b0544035Affected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 95fbed8ae8c32c0977e6be1721c190d8fea23f2fAffected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 70767689ec6ee5f05fb0a2c17d7ec1927946e486Affected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before ecd62f684386fa64f9c0cea92eea361f4e6444c2Affected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 2fe5d62e122b040ce7fc4d31aa7fa96ae328cefcAffected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 88f97a4b5843ce21c1286e082c02a5fb4d8eb473Affected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 0b6b8c2055784261de3fb641c5d0d63964318e8fAffected 1afc32b952335f665327a1a9001ba1b44bb76fd9 to before bc0a2f3a73fcdac651fca64df39306d1e5ebe3b0Affected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.60 through 6.6.Not affected 6.11.7 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 27d95867bee806cdc448d122bd99f1d8b0544035Affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 95fbed8ae8c32c0977e6be1721c190d8fea23f2fAffected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 70767689ec6ee5f05fb0a2c17d7ec1927946e486Affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before ecd62f684386fa64f9c0cea92eea361f4e6444c2Affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 2fe5d62e122b040ce7fc4d31aa7fa96ae328cefcAffected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 88f97a4b5843ce21c1286e082c02a5fb4d8eb473Affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before 0b6b8c2055784261de3fb641c5d0d63964318e8fAffected
1afc32b952335f665327a1a9001ba1b44bb76fd9 to before bc0a2f3a73fcdac651fca64df39306d1e5ebe3b0Affected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.60 through 6.6.*Not affected
6.11.7 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.