CVE-2024-50080

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability has been resolved in the Linux kernel related to the ublk module. The issue concerns the UBLK F USER COPY feature, which requires userspace to call write() on the ublk character device to fill the request buffer. Since unprivileged devices cannot be trusted, the kernel now disallows user copy for unprivileged devices to prevent potential exploitation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.