{"timestamp":"2025-10-01T20:17:05.945317Z","id":"CVE-2024-50222","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["lib/iov_iter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"908a1ad89466c1febf20bfe0037b84fc66f8a3f8","lessThan":"4f7ffa83fa79dd52efbaef366c850aaaae06a469","versionType":"git","status":"affected"},{"version":"908a1ad89466c1febf20bfe0037b84fc66f8a3f8","lessThan":"3a303409f271dfe0987b8f79595138340497a32d","versionType":"git","status":"affected"},{"version":"908a1ad89466c1febf20bfe0037b84fc66f8a3f8","lessThan":"c749d9b7ebbc5716af7a95f7768634b30d9446ec","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["lib/iov_iter.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.6","status":"affected"},{"version":"0","lessThan":"6.6","versionType":"semver","status":"unaffected"},{"version":"6.6.60","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.11.7","lessThanOrEqual":"6.11.*","versionType":"semver","status":"unaffected"},{"version":"6.12","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NIST NVD-CWE-noinfo

OR
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6 up to (excluding) 6.6.60
     *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.7
     *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*
     *cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*

https://git.kernel.org/stable/c/3a303409f271dfe0987b8f79595138340497a32d No Types Assigned

https://git.kernel.org/stable/c/3a303409f271dfe0987b8f79595138340497a32d Patch

https://git.kernel.org/stable/c/4f7ffa83fa79dd52efbaef366c850aaaae06a469 No Types Assigned

https://git.kernel.org/stable/c/4f7ffa83fa79dd52efbaef366c850aaaae06a469 Patch

https://git.kernel.org/stable/c/c749d9b7ebbc5716af7a95f7768634b30d9446ec No Types Assigned

https://git.kernel.org/stable/c/c749d9b7ebbc5716af7a95f7768634b30d9446ec Patch

In the Linux kernel, the following vulnerability has been resolved:

iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP

generic/077 on x86_32 CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y with highmem,
on huge=always tmpfs, issues a warning and then hangs (interruptibly):

WARNING: CPU: 5 PID: 3517 at mm/highmem.c:622 kunmap_local_indexed+0x62/0xc9
CPU: 5 UID: 0 PID: 3517 Comm: cp Not tainted 6.12.0-rc4 #2
...
copy_page_from_iter_atomic+0xa6/0x5ec
generic_perform_write+0xf6/0x1b4
shmem_file_write_iter+0x54/0x67

Fix copy_page_from_iter_atomic() by limiting it in that case
(include/linux/skbuff.h skb_frag_must_loop() does similar).

But going forward, perhaps CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP is too
surprising, has outlived its usefulness, and should just be removed?

kernel.org https://git.kernel.org/stable/c/3a303409f271dfe0987b8f79595138340497a32d [No types assigned]

kernel.org https://git.kernel.org/stable/c/4f7ffa83fa79dd52efbaef366c850aaaae06a469 [No types assigned]

kernel.org https://git.kernel.org/stable/c/c749d9b7ebbc5716af7a95f7768634b30d9446ec [No types assigned]