What is the severity of CVE-2024-50080?

CVE-2024-50080 is considered a moderate severity vulnerability in the Linux kernel.

How do I fix CVE-2024-50080?

To fix CVE-2024-50080, update to the patched versions of the Linux kernel, such as 5.10.223-1, 6.1.123-1, or 6.12.12-1.

Which versions of the Linux kernel are affected by CVE-2024-50080?

CVE-2024-50080 affects several Linux kernel versions between 6.5 and 6.6.58, as well as 6.7 to 6.11.5 and the 6.12 release candidates.

What is UBLK_F_USER_COPY in relation to CVE-2024-50080?

UBLK_F_USER_COPY is a feature that should not allow unprivileged devices to make user copies, which is the basis of CVE-2024-50080.

Is CVE-2024-50080 related to user privilege escalation?

Yes, CVE-2024-50080 is related to user privilege escalation risks due to the handling of unprivileged devices in the Linux kernel.

Vulnerability/
CVE-2024-50080

medium

5.5

29/10/2024

19/12/2024

CVE-2024-50080: ublk: don't allow user copy for unprivileged device

First published: Tue Oct 29 2024(Updated: )

In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for filling request buffer, and unprivileged device can't be trusted. So don't allow user copy for unprivileged device.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected Software	Affected Version	How to fix
Linux Kernel	>=6.5<6.6.58
Linux Kernel	>=6.7<6.11.5
Linux Kernel	=6.12-rc1
Linux Kernel	=6.12-rc2
Linux Kernel	=6.12-rc3
debian/linux		5.10.223-1 5.10.226-1 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-50080?
CVE-2024-50080 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50080?
To fix CVE-2024-50080, update to the patched versions of the Linux kernel, such as 5.10.223-1, 6.1.123-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2024-50080?
CVE-2024-50080 affects several Linux kernel versions between 6.5 and 6.6.58, as well as 6.7 to 6.11.5 and the 6.12 release candidates.
What is UBLK_F_USER_COPY in relation to CVE-2024-50080?
UBLK_F_USER_COPY is a feature that should not allow unprivileged devices to make user copies, which is the basis of CVE-2024-50080.
Is CVE-2024-50080 related to user privilege escalation?
Yes, CVE-2024-50080 is related to user privilege escalation risks due to the handling of unprivileged devices in the Linux kernel.

agent/title
agent/type
agent/first-publish-date
agent/author
agent/event
agent/severity
agent/remedy
collector/mitre-cve
source/MITRE
agent/last-modified-date
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/usn-cve
source/Ubuntu
collector/launchpad-cve
source/Launchpad
collector/nvd-cve
collector/security-tracker-debian
source/Debian
agent/source
agent/references
agent/softwarecombine
agent/tags
agent/description
vendor/linux
canonical/linux kernel
version/linux kernel/6.5
version/linux kernel/6.7
version/linux kernel/6.12-rc1
version/linux kernel/6.12-rc2
version/linux kernel/6.12-rc3
package-manager/debian

Frequently Asked Questions

What is the severity of CVE-2024-50080?
CVE-2024-50080 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50080?
To fix CVE-2024-50080, update to the patched versions of the Linux kernel, such as 5.10.223-1, 6.1.123-1, or 6.12.12-1.
Which versions of the Linux kernel are affected by CVE-2024-50080?
CVE-2024-50080 affects several Linux kernel versions between 6.5 and 6.6.58, as well as 6.7 to 6.11.5 and the 6.12 release candidates.
What is UBLK_F_USER_COPY in relation to CVE-2024-50080?
UBLK_F_USER_COPY is a feature that should not allow unprivileged devices to make user copies, which is the basis of CVE-2024-50080.
Is CVE-2024-50080 related to user privilege escalation?
Yes, CVE-2024-50080 is related to user privilege escalation risks due to the handling of unprivileged devices in the Linux kernel.

CVE-2024-50080: ublk: don't allow user copy for unprivileged device

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-50080?

How do I fix CVE-2024-50080?

Which versions of the Linux kernel are affected by CVE-2024-50080?

What is UBLK_F_USER_COPY in relation to CVE-2024-50080?

Is CVE-2024-50080 related to user privilege escalation?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2024-50080?

How do I fix CVE-2024-50080?

Which versions of the Linux kernel are affected by CVE-2024-50080?

What is UBLK_F_USER_COPY in relation to CVE-2024-50080?

Is CVE-2024-50080 related to user privilege escalation?