VulnerabilityModified
CVE-2024-50179
In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps…
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads it will also try to mark pages dirty, but for the read path it won't hold the Fw caps and there is case will it get the Fw reference.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/11ab19d48ab877430eed0c7d83810970bbcbc4f6Patch
- https://git.kernel.org/stable/c/126b567a2ef65fc38a71d832bf1216c56816f231Patch
- https://git.kernel.org/stable/c/74b302ebad5b43ac17460fa58092d892a3cba6ebPatch
- https://git.kernel.org/stable/c/9d4f619153bab7fa59736462967821d6521a38cbPatch
- https://git.kernel.org/stable/c/c08dfb1b49492c09cf13838c71897493ea3b424ePatch
- https://git.kernel.org/stable/c/c26c5ec832dd9e9dcd0a0a892a485c99889b68f0Patch
- https://git.kernel.org/stable/c/ea98284fc4fb05f276737d2043b02b62be5a8dfbPatch
- https://git.kernel.org/stable/c/f55e003d261baa7c57d51ae5c8ec1f5c26a35c89Patch
- https://git.kernel.org/stable/c/f863bfd0a2c6c99011c62ea71ac04f8e78707da9Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.