CVE-2024-49994

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an integer overflow in BLKSECDISCARD, which can cause a near infinite loop inside blkdev issue secure erase(). This occurs when a specific ioctl call is made with a large value, such as uint64 t r[2] = {512, 18446744073709551104ULL}; and ioctl(fd, BLKSECDISCARD, r);. The problem leads to an attempt to access beyond the end of a device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.