← CVE Intelligence

CVE-2024-50091

dm vdo: don't refer to dedupe_context after releasing it PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: dm vdo: don't refer to dedupe_context after releasing it Clear the dedupe_context pointer in a data_vio whenever ownership of the context is lost, so that vdo can't examine it accidentally.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected cfaf07fae7a262865a67b6010eef3bc0a1ae50b2 before 63ef073084c67878d7a92e15ad055172da3f05a3; affected cfaf07fae7a262865a67b6010eef3bc0a1ae50b2 before 0808ebf2f80b962e75741a41ced372a7116f1e26
Linux / Linuxaffected 6.9; unaffected 0 before 6.9; unaffected 6.11.4 through 6.11.*; unaffected 6.12 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.