Riskcovery

CVE-2024-50272

filemap: Fix bounds checking in filemap_read()

State
Published
Severity
Not scored
Published
Nov 19, 2024
Updated
May 23, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

filemap: Fix bounds checking in filemap_read()

If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop.

This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c2a9737f45e27d8263ff9643f994bda9bac0b944 to before 6cc52df69e8464811f9f6fc12f7aaa78451eb0b8Affected
  • c2a9737f45e27d8263ff9643f994bda9bac0b944 to before 26530b757c81f1389fb33ae0357500150933161bAffected
  • c2a9737f45e27d8263ff9643f994bda9bac0b944 to before a2746ab3bbc9c6408da5cd072653ec8c24749235Affected
  • c2a9737f45e27d8263ff9643f994bda9bac0b944 to before 6450e73f4c86d481ac2e22e1bc848d346e140826Affected
  • c2a9737f45e27d8263ff9643f994bda9bac0b944 to before ace149e0830c380ddfce7e466fe860ca502fe4eeAffected
  • 272830350bb1bb5bb39395966ea63b9864b135d1Affected
  • fbc7b803831e5c8a42c1f3427a17e55a814d6b3cAffected
  • 3d549dcfbbb0ecdaa571431a27ee5da9f2466716Affected
  • 3.16.40 to before 3.17Affected
  • 4.7.10 to before 4.8Affected
  • 4.8.4 to before 4.9Affected
LinuxLinux
  • 4.9Affected
  • before 4.9Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.117 through 6.1.*Not affected
  • 6.6.61 through 6.6.*Not affected
  • 6.11.8 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.