CVE-2024-50272

filemap: Fix bounds checking in filemap_read()

MEDIUM

5.5

CVSS Score

Published: November 19, 2024 at 01:30 AM UTC

Updated: June 17, 2026 at 08:04 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

Description

In the Linux kernel, the following vulnerability has been resolved: filemap: Fix bounds checking in filemap_read() If the caller supplies an iocb->ki_pos value that is close to the filesystem upper limit, and an iterator with a count that causes us to overflow that limit, then filemap_read() enters an infinite loop. This behaviour was discovered when testing xfstests generic/525 with the "localio" optimisation for loopback NFS mounts.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 3.16.40v ≥ 4.7.10v ≥ 4.8.43.16.40 ≤ v < 3.174.7.10 ≤ v < 4.84.8.4 ≤ v < 4.94.9 ≤ v < 5.15.1814.9 ≤ v < 6.1.1174.9 ≤ v < 6.11.84.9 ≤ v < 6.124.9 ≤ v < 6.6.616.2 ≤ v < 6.6.616.7 ≤ v < 6.11.8272830350bb1bb5bb39395966ea63b9864b135d13.16.403d549dcfbbb0ecdaa571431a27ee5da9f24667164.7.10 4.8.4 6.12 rc1 6.12 rc2 6.12 rc3 6.12 rc4 6.12 rc5 6.12 rc6c2a9737f45e27d8263ff9643f994bda9bac0b944fbc7b803831e5c8a42c1f3427a17e55a814d6b3c

Vendor states this is fixed in 26530b757c81f1389fb33ae0357500150933161b (fixed)

Vendor states this is fixed in 6450e73f4c86d481ac2e22e1bc848d346e140826 (fixed)

Vendor states this is fixed in 6cc52df69e8464811f9f6fc12f7aaa78451eb0b8 (fixed)

Vendor states this is fixed in a2746ab3bbc9c6408da5cd072653ec8c24749235 (fixed)

Vendor states this is fixed in ace149e0830c380ddfce7e466fe860ca502fe4ee (fixed)

Affected range stops below 3.17, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.8, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 4.9 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 6.1.117 (unaffected)

Vendor states this is fixed in 6.11.8 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)