Vulnerability details

CVE-2024-50211

Linux Linux

udf: refactor inode_bmap() to handle error

CVSS 3.1
7.8High

Official description

In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On situations like ftruncate, udf_extend_file() can now detect errors and bail out early without resorting to checking for particular offsets and assuming internal behavior of these functions.

CVSS scores

ScoreVersionSourceVector
3.3Low 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
7.8High 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 2.6.12 CVEProject cvelistV5 (CNA)
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 493447dd8336607fce426f7879e581095f6c606e CVEProject cvelistV5 (CNA)
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < b22d9a5698abf04341f8fbc30141e0673863c3a6 CVEProject cvelistV5 (CNA)
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < c226964ec786f3797ed389a16392ce4357697d24 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2024-11-08
Last updated
2026-08-05
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.21%
Probability of exploitation in 30 days
11.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • —