CVE-2024-36917

block: fix overflow in blk_ioctl_discard()

published May 30, 2024

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

block: fix overflow in blk_ioctl_discard()

There is no check for overflow of 'start + len' in blk_ioctl_discard().

Hung task occurs if submit an discard ioctl with the following param:

start = 0x80000000000ff000, len = 0x8000000000fff000;

Add the overflow validation now.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00225 · 12.5th percentile
Published
2024-05-30T15:29Z
EPSS history
Timeline
  • 30 MAY 15:29Z
    block: fix overflow in blk_ioctl_discard()
    cvelistv5