Lucene search

K
redhatcveRedhat.comRH:CVE-2024-36917
HistoryJun 03, 2024 - 1:12 p.m.

CVE-2024-36917

2024-06-0313:12:44
redhat.com
access.redhat.com
7
linux kernel
vulnerability
overflow
blk_ioctl_discard

AI Score

7.3

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of ‘start + len’ in blk_ioctl_discard(). Hung task occurs if submit an discard ioctl with the following param: start = 0x80000000000ff000, len = 0x8000000000fff000; Add the overflow validation now.