CVE-2024-50218

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow

Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int".

So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 27d95867bee806cdc448d122bd99f1d8b0544035; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 95fbed8ae8c32c0977e6be1721c190d8fea23f2f; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 70767689ec6ee5f05fb0a2c17d7ec1927946e486; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < ecd62f684386fa64f9c0cea92eea361f4e6444c2; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 2fe5d62e122b040ce7fc4d31aa7fa96ae328cefc; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 88f97a4b5843ce21c1286e082c02a5fb4d8eb473; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < 0b6b8c2055784261de3fb641c5d0d63964318e8f; >= 1afc32b952335f665327a1a9001ba1b44bb76fd9, < bc0a2f3a73fcdac651fca64df39306d1e5ebe3b0
LinuxLinux2.6.24

References

Timeline

Published
Nov 9, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-50224.4The file scheme of URLs would be hidden, resulting in potential spoofing of a website's address in the location bar This vulnerability affecCVE-2024-502204.7In the Linux kernel, the following vulnerability has been resolved: fork: do not invoke uffd on fork if error occurs Patch series "fork: dCVE-2024-502217.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Vangogh: Fix kernel memory out of bounds write KASAN reporCVE-2024-502227.8In the Linux kernel, the following vulnerability has been resolved: iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP genCVE-2024-502235.5In the Linux kernel, the following vulnerability has been resolved: sched/numa: Fix the potential null pointer dereference in task_numa_worCVE-2024-502245.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-dspi: Fix crash when not using GPIO chip select Add checkCVE-2024-502255.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix error propagation of split bios The purpose of btrfs_bbio_pCVE-2024-502267.8In the Linux kernel, the following vulnerability has been resolved: cxl/port: Fix use-after-free, permit out-of-order decoder shutdown In CVE-2024-502277.1In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_CVE-2024-502295.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot repoCVE-2024-50239.3Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe allows Command InjectCVE-2024-502307.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot
CVE-2024-50218: Medium severity, CVSS 5.5 | Vulnix