block: fix integer overflow in BLKSECDISCARD
In the Linux kernel, the following vulnerability has been resolved: block: fix integer overflow in BLKSECDISCARD I independently rediscovered commit 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155 block: fix overflow in blk_ioctl_discard() but for secure erase. Same problem: uint64_t r[2] = {512, 18446744073709551104ULL}; ioctl(fd, BLKSECDISCARD, r); will enter near infinite loop inside blkdev_issue_secure_erase(): a.out: attempt to access beyond end of device loop0: rw=5, sector=3399043073, nr_sectors = 1024 limit=2048 bio_check_eod: 3286214 callbacks suppressed
CVE-2024-49994
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-49994
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "44abff2c0b970ae3d310b97617525dc01f248d7c",
"lessThan": "8476f8428e8b48fd7a0e4258fa2a96a8f4468239",
"versionType": "git"
},
{
"status": "affected",
"version": "44abff2c0b970ae3d310b97617525dc01f248d7c",
"lessThan": "a99bacb35c1416355eef957560e8fcac3a665549",
"versionType": "git"
},
{
"status": "affected",
"version": "44abff2c0b970ae3d310b97617525dc01f248d7c",
"lessThan": "0842ddd83939eb4db940b9af7d39e79722bc41aa",
"versionType": "git"
},
{
"status": "affected",
"version": "44abff2c0b970ae3d310b97617525dc01f248d7c",
"lessThan": "6c9915fa9410cbb9bd75ee283c03120046c56d3d",
"versionType": "git"
},
{
"status": "affected",
"version": "44abff2c0b970ae3d310b97617525dc01f248d7c",
"lessThan": "697ba0b6ec4ae04afb67d3911799b5e2043b4455",
"versionType": "git"
}
],
"programFiles": [
"block/ioctl.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.128",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.75",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.10.14",
"versionType": "semver",
"lessThanOrEqual": "6.10.*"
},
{
"status": "unaffected",
"version": "6.11.3",
"versionType": "semver",
"lessThanOrEqual": "6.11.*"
},
{
"status": "unaffected",
"version": "6.12",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"block/ioctl.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-49994
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26764 · Revision 1
- Added to Heist Feed
- Publisher date