MediumFix available
ceph: remove the incorrect Fw reference check when dirtying pages
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.323, 5.10.227, 5.15.168, 5.4.285, 6.1.113, 6.10.14, 6.11.3, 6.6.55
- CVEs
- CVE-2024-50179
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 03:17 UTC · Revision 1
Source evidence
ceph: remove the incorrect Fw reference check when dirtying pages
core-osv · Original sourcePublished 8 Nov 2024, 05:24 UTC
In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.
osv:CVE-2024-50179
Kernel
Fixed versions: 4.19.323, 5.4.285, 5.10.227, 5.15.168, 6.1.113, 6.6.55, 6.10.14, 6.11.3
Complete source record
{
"id": "d3c2cdc6add191fc145bccae84887559d9b4c647e742bf4242d52d52a5c675db",
"url": "https://osv.dev/vulnerability/CVE-2024-50179",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ceph: remove the incorrect Fw reference check when dirtying pages",
"summary": "In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.",
"evidence": "osv:CVE-2024-50179",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.323",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.285",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.227",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.168",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.113",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.55",
"evidence": "/affected/1/ranges"
},
{
"value": "6.10.14",
"evidence": "/affected/1/ranges"
},
{
"value": "6.11.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CVE-2024-50179",
"aliases": [
"CVE-2024-50179"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29"
},
{
"fixed": "c26c5ec832dd9e9dcd0a0a892a485c99889b68f0"
},
{
"fixed": "126b567a2ef65fc38a71d832bf1216c56816f231"
},
{
"fixed": "f55e003d261baa7c57d51ae5c8ec1f5c26a35c89"
},
{
"fixed": "f863bfd0a2c6c99011c62ea71ac04f8e78707da9"
},
{
"fixed": "ea98284fc4fb05f276737d2043b02b62be5a8dfb"
},
{
"fixed": "11ab19d48ab877430eed0c7d83810970bbcbc4f6"
},
{
"fixed": "9d4f619153bab7fa59736462967821d6521a38cb"
},
{
"fixed": "74b302ebad5b43ac17460fa58092d892a3cba6eb"
},
{
"fixed": "c08dfb1b49492c09cf13838c71897493ea3b424e"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50179.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.2.0"
},
{
"fixed": "4.19.323"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.285"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.227"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.168"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.113"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.55"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.10.14"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.11.0"
},
{
"fixed": "6.11.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50179.json"
}
}
],
"modified": "2026-10-28T02:30:42.452483504Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/11ab19d48ab877430eed0c7d83810970bbcbc4f6",
"https://git.kernel.org/stable/c/126b567a2ef65fc38a71d832bf1216c56816f231",
"https://git.kernel.org/stable/c/74b302ebad5b43ac17460fa58092d892a3cba6eb",
"https://git.kernel.org/stable/c/9d4f619153bab7fa59736462967821d6521a38cb",
"https://git.kernel.org/stable/c/c08dfb1b49492c09cf13838c71897493ea3b424e",
"https://git.kernel.org/stable/c/c26c5ec832dd9e9dcd0a0a892a485c99889b68f0",
"https://git.kernel.org/stable/c/ea98284fc4fb05f276737d2043b02b62be5a8dfb",
"https://git.kernel.org/stable/c/f55e003d261baa7c57d51ae5c8ec1f5c26a35c89",
"https://git.kernel.org/stable/c/f863bfd0a2c6c99011c62ea71ac04f8e78707da9",
"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50179.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50179",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50179.json"
}
},
"related_cves": [
{
"value": "CVE-2024-50179",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 509786,
"published_at": "2024-11-08T05:24:01.164+00:00"
}