CVE-2024-50080

ublk: don't allow user copy for unprivileged device

Medium · published October 29, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ublk: don't allow user copy for unprivileged device

UBLK_F_USER_COPY requires userspace to call write() on ublk char

device for filling request buffer, and unprivileged device can't

be trusted.

So don't allow user copy for unprivileged device.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2024-10-29T00:50Z
EPSS history
Timeline
  • 29 OCT 00:50Z
    ublk: don't allow user copy for unprivileged device
    cvelistv5