UnratedFix available
filemap: Fix bounds checking in filemap_read()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.15.181, 6.1.117, 6.11.8, 6.6.61
- CVEs
- CVE-2024-50272
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 6 Nov 2026, 18:07 UTC · Revision 1
Source evidence
filemap: Fix bounds checking in filemap_read()
core-osv · Original sourcePublished 19 Nov 2024, 01:30 UTC
In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.
osv:CVE-2024-50272
Kernel
Fixed versions: 5.15.181, 6.1.117, 6.6.61, 6.11.8
Complete source record
{
"id": "6cdf55a3e7e4be0c6a35cf7ca929d28369f7bdd1d660aa53c7c8805cb8cee0cc",
"url": "https://osv.dev/vulnerability/CVE-2024-50272",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "filemap: Fix bounds checking in filemap_read()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the \"localio\" optimisation for loopback NFS mounts.",
"evidence": "osv:CVE-2024-50272",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.15.181",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.117",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.61",
"evidence": "/affected/1/ranges"
},
{
"value": "6.11.8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2024-50272",
"aliases": [
"CVE-2024-50272"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c2a9737f45e27d8263ff9643f994bda9bac0b944"
},
{
"fixed": "6cc52df69e8464811f9f6fc12f7aaa78451eb0b8"
},
{
"fixed": "26530b757c81f1389fb33ae0357500150933161b"
},
{
"fixed": "a2746ab3bbc9c6408da5cd072653ec8c24749235"
},
{
"fixed": "6450e73f4c86d481ac2e22e1bc848d346e140826"
},
{
"fixed": "ace149e0830c380ddfce7e466fe860ca502fe4ee"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3.16.40"
},
{
"fixed": "3.17"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.7.10"
},
{
"fixed": "4.8"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "4.8.4"
},
{
"fixed": "4.9"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "272830350bb1bb5bb39395966ea63b9864b135d1"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "fbc7b803831e5c8a42c1f3427a17e55a814d6b3c"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3d549dcfbbb0ecdaa571431a27ee5da9f2466716"
}
]
}
],
"versions": [
"v3.16.85",
"v3.16.84",
"v3.16.83",
"v3.16.82",
"v3.16.81",
"v3.16.80",
"v3.16.79",
"v3.16.78",
"v3.16.77",
"v3.16.76",
"v3.16.75",
"v3.16.74",
"v3.16.73",
"v3.16.72",
"v3.16.71",
"v3.16.70",
"v3.16.69",
"v3.16.68",
"v3.16.67",
"v3.16.66",
"v3.16.65",
"v3.16.64",
"v3.16.63",
"v3.16.62",
"v3.16.61",
"v3.16.60",
"v3.16.59",
"v3.16.58",
"v3.16.57",
"v3.16.56",
"v3.16.55",
"v3.16.54",
"v3.16.53",
"v3.16.52",
"v3.16.51",
"v3.16.50",
"v3.16.49",
"v3.16.48",
"v3.16.47",
"v3.16.46",
"v3.16.45",
"v3.16.44",
"v3.16.43",
"v3.16.42",
"v3.16.41",
"v3.16.40",
"v4.7.10",
"v4.8.17",
"v4.8.16",
"v4.8.15",
"v4.8.14",
"v4.8.13",
"v4.8.12",
"v4.8.11",
"v4.8.10",
"v4.8.9",
"v4.8.8",
"v4.8.7",
"v4.8.6",
"v4.8.5",
"v4.8.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50272.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.9.0"
},
{
"fixed": "5.15.181"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.117"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.61"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.11.8"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50272.json"
}
}
],
"modified": "2026-10-28T02:30:48.023091358Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/26530b757c81f1389fb33ae0357500150933161b",
"https://git.kernel.org/stable/c/6450e73f4c86d481ac2e22e1bc848d346e140826",
"https://git.kernel.org/stable/c/6cc52df69e8464811f9f6fc12f7aaa78451eb0b8",
"https://git.kernel.org/stable/c/a2746ab3bbc9c6408da5cd072653ec8c24749235",
"https://git.kernel.org/stable/c/ace149e0830c380ddfce7e466fe860ca502fe4ee",
"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50272.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50272",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50272.json"
}
},
"related_cves": [
{
"value": "CVE-2024-50272",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 515844,
"published_at": "2024-11-19T01:30:11.194+00:00"
}