PT-2024-33855 · Linux+8 · Linux Kernel+8
Zhihao Cheng
·
Published
2024-10-21
·
Updated
2025-09-29
·
CVE-2024-50015
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A vulnerability in the Linux kernel related to ext4 file systems has been fixed. The issue arises in the dax iomap rw() function, which maps written blocks and copies user data to blocks. If the process is killed by the user, the copied data will be returned and added to the inode size, potentially exceeding the inode size and causing fsck to fail. The problem is fixed by truncating extents if the written length is smaller than expected.
Recommendations:
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider disabling the dax iomap rw() function until a patch is available. Restrict access to the ext4 file system to minimize the risk of exploitation. Avoid using the
iter->pos and iocb->ki pos variables in the affected code until the issue is resolved.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu