Security tracker / CVE-2024-50272

CVE-2024-50272

filemap: Fix bounds checking in filemap_read()

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in c2a9737f45e2 ("vfs,mm: fix a dead loop in
 carnil> truncate_inode_pages_range()"). Vulnerable versions: 3.16.40 4.7.10 4.8.4
 carnil> 4.9-rc1.

Bugs

Status

Branch	Status
upstream	released (6.12-rc7) [ace149e0830c380ddfce7e466fe860ca502fe4ee]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.11-upstream-stable	released (6.11.8) [6450e73f4c86d481ac2e22e1bc848d346e140826]
6.6-upstream-stable	released (6.6.61) [a2746ab3bbc9c6408da5cd072653ec8c24749235]
6.1-upstream-stable	released (6.1.117) [26530b757c81f1389fb33ae0357500150933161b]
5.10-upstream-stable	needed
sid	released (6.11.9-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.119-1)
5.10-bullseye-security	needed