PT-2024-33913
CVE-2024-50080
·
تاريخ النشر
2024-10-28
·
تاريخ التحديث
2025-10-03
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability has been resolved in the Linux kernel related to the
ublk module. The issue concerns the UBLK F USER COPY feature, which requires userspace to call write() on the ublk character device to fill the request buffer. Since unprivileged devices cannot be trusted, the kernel now disallows user copy for unprivileged devices to prevent potential exploitation.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾