PT-2024-34051 · Linux+4 · Linux Kernel+4
Published
2024-10-23
·
Updated
2025-10-08
·
CVE-2024-50216
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
The issue is related to the xfs file system in the Linux kernel. Specifically, the problem occurs in the
xfs filestream pick ag function when it fails to find a suitable allocation group (AG) and attempts to pick an online AG as a last resort. The loop for this last resort uses args->pag as a loop iterator, but the later code expects pag to be set. The fix involves reusing the max pag case for this last resort and adding a check for the impossible case of no AG to prevent the uninitialized pag from escaping.Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the
xfs filestream pick ag function until a patch is available.Exploit
Fix
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu