github - ghsa-98xj-43wv-fx2j

ghsa-98xj-43wv-fx2j

Vulnerability from github

Published

2024-11-08 06:30

Modified

2024-11-29 21:31

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

In the Linux kernel, the following vulnerability has been resolved:

ceph: remove the incorrect Fw reference check when dirtying pages

When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-50179"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-11-08T06:15:15Z",
    "severity": "MODERATE"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: remove the incorrect Fw reference check when dirtying pages\n\nWhen doing the direct-io reads it will also try to mark pages dirty,\nbut for the read path it won\u0027t hold the Fw caps and there is case\nwill it get the Fw reference.",
  "id": "GHSA-98xj-43wv-fx2j",
  "modified": "2024-11-29T21:31:01Z",
  "published": "2024-11-08T06:30:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50179"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/11ab19d48ab877430eed0c7d83810970bbcbc4f6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/126b567a2ef65fc38a71d832bf1216c56816f231"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/74b302ebad5b43ac17460fa58092d892a3cba6eb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9d4f619153bab7fa59736462967821d6521a38cb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c08dfb1b49492c09cf13838c71897493ea3b424e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c26c5ec832dd9e9dcd0a0a892a485c99889b68f0"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ea98284fc4fb05f276737d2043b02b62be5a8dfb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f55e003d261baa7c57d51ae5c8ec1f5c26a35c89"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f863bfd0a2c6c99011c62ea71ac04f8e78707da9"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2024-50179

Vulnerability from cvelistv5

Published

2024-11-08 05:24

Modified

2024-12-19 09:34

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.

References

▼	URL	Tags
	https://git.kernel.org/stable/c/c26c5ec832dd9e9dcd0a0a892a485c99889b68f0
	https://git.kernel.org/stable/c/126b567a2ef65fc38a71d832bf1216c56816f231
	https://git.kernel.org/stable/c/f55e003d261baa7c57d51ae5c8ec1f5c26a35c89
	https://git.kernel.org/stable/c/f863bfd0a2c6c99011c62ea71ac04f8e78707da9
	https://git.kernel.org/stable/c/ea98284fc4fb05f276737d2043b02b62be5a8dfb
	https://git.kernel.org/stable/c/11ab19d48ab877430eed0c7d83810970bbcbc4f6
	https://git.kernel.org/stable/c/9d4f619153bab7fa59736462967821d6521a38cb
	https://git.kernel.org/stable/c/74b302ebad5b43ac17460fa58092d892a3cba6eb
	https://git.kernel.org/stable/c/c08dfb1b49492c09cf13838c71897493ea3b424e

Impacted products

Vendor

Product

Version

▼

Linux

Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29
Version: 5dda377cf0a6bd43f64a3c1efb670d7c668e7b29

Linux

Version: 4.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ceph/addr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c26c5ec832dd9e9dcd0a0a892a485c99889b68f0",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "126b567a2ef65fc38a71d832bf1216c56816f231",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "f55e003d261baa7c57d51ae5c8ec1f5c26a35c89",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "f863bfd0a2c6c99011c62ea71ac04f8e78707da9",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "ea98284fc4fb05f276737d2043b02b62be5a8dfb",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "11ab19d48ab877430eed0c7d83810970bbcbc4f6",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "9d4f619153bab7fa59736462967821d6521a38cb",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "74b302ebad5b43ac17460fa58092d892a3cba6eb",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            },
            {
              "lessThan": "c08dfb1b49492c09cf13838c71897493ea3b424e",
              "status": "affected",
              "version": "5dda377cf0a6bd43f64a3c1efb670d7c668e7b29",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ceph/addr.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.323",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.227",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: remove the incorrect Fw reference check when dirtying pages\n\nWhen doing the direct-io reads it will also try to mark pages dirty,\nbut for the read path it won\u0027t hold the Fw caps and there is case\nwill it get the Fw reference."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T09:34:44.825Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c26c5ec832dd9e9dcd0a0a892a485c99889b68f0"
        },
        {
          "url": "https://git.kernel.org/stable/c/126b567a2ef65fc38a71d832bf1216c56816f231"
        },
        {
          "url": "https://git.kernel.org/stable/c/f55e003d261baa7c57d51ae5c8ec1f5c26a35c89"
        },
        {
          "url": "https://git.kernel.org/stable/c/f863bfd0a2c6c99011c62ea71ac04f8e78707da9"
        },
        {
          "url": "https://git.kernel.org/stable/c/ea98284fc4fb05f276737d2043b02b62be5a8dfb"
        },
        {
          "url": "https://git.kernel.org/stable/c/11ab19d48ab877430eed0c7d83810970bbcbc4f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/9d4f619153bab7fa59736462967821d6521a38cb"
        },
        {
          "url": "https://git.kernel.org/stable/c/74b302ebad5b43ac17460fa58092d892a3cba6eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/c08dfb1b49492c09cf13838c71897493ea3b424e"
        }
      ],
      "title": "ceph: remove the incorrect Fw reference check when dirtying pages",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-50179",
    "datePublished": "2024-11-08T05:24:01.164Z",
    "dateReserved": "2024-10-21T19:36:19.964Z",
    "dateUpdated": "2024-12-19T09:34:44.825Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted