Security Advisory
CVE-2024-50080
5.5
MEDIUM
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
ublk: don't allow user copy for unprivileged device
UBLK_F_USER_COPY requires userspace to call write() on ublk char
device for filling request buffer, and unprivileged device can't
be trusted.
So don't allow user copy for unprivileged device.
Published Date
October 29, 2024
Official Source
NIST NVD Advisory