Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-38604
HistoryJun 20, 2024 - 12:00 a.m.

CVE-2024-38604

2024-06-2000:00:00
ubuntu.com
ubuntu.com
linux kernel
vulnerability resolution
blkdev_iomap_begin
eof check
inode size
i_size check
raw pos
zero size write

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved:
block: refine the EOF check in blkdev_iomap_begin
blkdev_iomap_begin rounds down the offset to the logical block size
before stashing it in iomap->offset and checking that it still is
inside the inode size.
Check the i_size check to the raw pos value so that we don’t try a
zero size write if iter->pos is unaligned.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%