CVE-2024-50216

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

xfs: fix finding a last resort AG in xfs_filestream_pick_ag

When the main loop in xfs_filestream_pick_ag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as loop iterator while the later code expects pag to be set. Fix this by reusing the max_pag case for this last resort, and also add a check for impossible case of no AG just to make sure that the uninitialized pag doesn't even escape in theory.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= f8f1ed1ab3babad46b25e2dbe8de43b33fe7aaa6, < 77ddc732416b017180893cbb2356e9f0a414c575; >= f8f1ed1ab3babad46b25e2dbe8de43b33fe7aaa6, < a023408925acd64db5c8980373fcb3e28ec6fd29; >= f8f1ed1ab3babad46b25e2dbe8de43b33fe7aaa6, < dc60992ce76fbc2f71c2674f435ff6bde2108028
LinuxLinux6.3

References

Timeline

Published
Nov 9, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-502177.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free of block device file in __btrfs_free_extra_deCVE-2024-502185.5In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reporteCVE-2024-50224.4The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affecCVE-2024-502204.7In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs Patch series "fork: dCVE-2024-502217.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write KASAN reporCVE-2024-502227.8In the Linux kernel, the following vulnerability has been resolved: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP genCVE-2024-502235.5In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in task_numa_worCVE-2024-502245.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add checkCVE-2024-502255.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix error propagation of split bios The purpose of btrfs_bbio_pCVE-2024-502267.8In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In CVE-2024-502277.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_CVE-2024-502295.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot repo
CVE-2024-50216: Medium severity, CVSS 5.5 | Vulnix