CVE-2024-36917

Updated: 2024-08-13 02:01:46.542647

Description:

In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 'start + len' in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000; Add the overflow validation now.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 4.4

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 4.4 MEDIUM Ignored 2024-08-13 14:25:02
AlmaLinux 9.2 FIPS kernel 5.14.0 4.4 MEDIUM Ignored 2024-08-13 14:25:02
CentOS 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:25:02
CentOS 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-13 14:25:02
CentOS 8.4 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-20 05:26:00
CentOS 8.5 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-20 05:26:00
CentOS Stream 8 ELS kernel 4.18.0 4.4 MEDIUM Ignored 2024-08-20 05:26:00
CloudLinux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:25:02
CloudLinux 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-13 14:25:02
Oracle Linux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-13 14:25:02