CVE-2024-50216: xfs: fix finding a last resort AG in xfs_filestream_pick_ag
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix finding a last resort AG in xfsfilestreampickag
When the main loop in xfsfilestreampickag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as loop iterator while the later code expects pag to be set. Fix this by reusing the maxpag case for this last resort, and also add a check for impossible case of no AG just to make sure that the uninitialized pag doesn't even escape in theory.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
xfs: fix finding a last resort AG in xfsfilestreampickag
When the main loop in xfsfilestreampickag fails to find a suitable AG it tries to just pick the online AG. But the loop for that uses args->pag as loop iterator while the later code expects pag to be set. Fix this by reusing the maxpag case for this last resort, and also add a check for impossible case of no AG just to make sure that the uninitialized pag doesn't even escape in theory.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50216?
CVE-2024-50216 is classified as a vulnerability that affects the Linux kernel's xfs file system functionality.
How do I fix CVE-2024-50216?
To mitigate CVE-2024-50216, upgrade to the patched Linux kernel versions 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.17-1.
Which versions of the Linux kernel are affected by CVE-2024-50216?
CVE-2024-50216 affects various versions of the Linux kernel prior to the updates provided in the fixed versions.
What systems are impacted by CVE-2024-50216?
Systems running the affected versions of the Linux kernel, particularly those utilizing the xfs file system, are impacted by CVE-2024-50216.
Is CVE-2024-50216 a remote exploit?
CVE-2024-50216 is not specifically categorized as a remote exploit but may impact local system stability when utilizing the xfs file system.