Lucene search

K
redhatcveRedhat.comRH:CVE-2024-38604
HistoryJun 20, 2024 - 2:29 p.m.

CVE-2024-38604

2024-06-2014:29:07
redhat.com
access.redhat.com
linux kernel
vulnerability
resolved
eof check
blkdev_iomap_begin
i_size
inode size
zero size write

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: block: refine the EOF check in blkdev_iomap_begin blkdev_iomap_begin rounds down the offset to the logical block size before stashing it in iomap->offset and checking that it still is inside the inode size. Check the i_size check to the raw pos value so that we don’t try a zero size write if iter->pos is unaligned.

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%