CVE-2024-50211

low-risk
Published 2024-11-08

In the Linux kernel, the following vulnerability has been resolved: udf: refactor inode_bmap() to handle error Refactor inode_bmap() to handle error since udf_next_aext() can return error now. On situations like ftruncate, udf_extend_file() can now detect errors and bail out early without resorting to checking for particular offsets and assuming internal behavior of these functions.

Do I need to act?

-
0.02% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
3
CVSS 3.3/10 Low
LOCAL / LOW complexity

Affected Products (2)

Affected Vendors

Linux

References (3)

Patch https://git.kernel.org/stable/c/493447dd8336607fce426f7879e581095f6c606e
Patch https://git.kernel.org/stable/c/b22d9a5698abf04341f8fbc30141e0673863c3a6
Patch https://git.kernel.org/stable/c/c226964ec786f3797ed389a16392ce4357697d24
20
/ 100
low-risk
Severity 13/34 · Low
Exploitability 0/34 · Minimal
Exposure 7/34 · Low