CVE-2024-50222

Summary

CVE-2024-50222 is a vulnerability affecting the Linux kernel's iov_iter function. Specifically, when the CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP flag is enabled on x86_32 systems with a highmem, huge=always tmpfs configuration, the copy_page_from_iter_atomic() function may issue a warning and subsequently hang (interruptibly). This issue is caused by an unchecked condition in copy_page_from_iter_atomic(), which can be mitigated by limiting its usage in this scenario. However, the vulnerability raises questions about the continued necessity of CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP, which may be worth reevaluating in future releases.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.