CVE Database
/

CVE-2024-50218

Back to search

CVE-2024-50218

Published: Nov 9, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Syzbot reported a kernel BUG in ocfs2_truncate_inline. There are two reasons for this: first, the parameter value passed is greater than ocfs2_max_inline_data_with_xattr, second, the start and end parameters of ocfs2_truncate_inline are "unsigned int". So, we need to add a sanity check for byte_start and byte_len right before ocfs2_truncate_inline() in ocfs2_remove_inode_range(), if they are greater than ocfs2_max_inline_data_with_xattr return -EINVAL.

VendorProductVersions

Linux

Linux

affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 - < 27d95867bee806cdc448d122bd99f1d8b0544035
affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 - < 95fbed8ae8c32c0977e6be1721c190d8fea23f2f
affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 - < 70767689ec6ee5f05fb0a2c17d7ec1927946e486
affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 - < ecd62f684386fa64f9c0cea92eea361f4e6444c2
affected
1afc32b952335f665327a1a9001ba1b44bb76fd9 - < 2fe5d62e122b040ce7fc4d31aa7fa96ae328cefc

+3 more versions

Linux

Linux

affected
2.6.24
unaffected
0 - < 2.6.24
unaffected
4.19.323 - <= 4.19.*
unaffected
5.4.285 - <= 5.4.*
unaffected
5.10.229 - <= 5.10.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now