CVE-2024-50211: udf: refactor inode_bmap() to handle error
In the Linux kernel, the following vulnerability has been resolved:
udf: refactor inodebmap() to handle error
Refactor inodebmap() to handle error since udfnextaext() can return error now. On situations like ftruncate, udfextendfile() can now detect errors and bail out early without resorting to checking for particular offsets and assuming internal behavior of these functions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.25-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.64.2-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50211?
CVE-2024-50211 has a medium severity level due to its impact on error handling in the Linux kernel.
How do I fix CVE-2024-50211?
To address CVE-2024-50211, upgrade the Linux kernel to a version that is later than 6.6.59 or between 6.7 and 6.11.6, or at least 6.12-rc1.
Which versions of the Linux kernel are affected by CVE-2024-50211?
CVE-2024-50211 affects versions of the Linux kernel up to 6.6.59 and those between 6.7 and 6.11.6, as well as version 6.12-rc1.
What is the function impacted by CVE-2024-50211?
CVE-2024-50211 specifically impacts the inode_bmap() function in the UDF implementation of the Linux kernel.
What type of vulnerabilities does CVE-2024-50211 address?
CVE-2024-50211 addresses vulnerabilities related to error handling during file truncation operations in the UDF file system.