NVD Vulnerability Detail

CVE-2024-50184

Summary	In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: Check device status before requesting flush If a pmem device is in a bad status, the driver side could wait for host ack forever in virtio_pmem_flush(), causing the system to hang. So add a status check in the beginning of virtio_pmem_flush() to return early if the device is not activated.
Publication Date	Nov. 8, 2024, 3:15 p.m.
Registration Date	Nov. 9, 2024, 5 a.m.
Last Update	Nov. 9, 2024, 1:15 a.m.

Related information, measures and tools

No	URL	refsource	タグ
1	https://git.kernel.org/stable/c/4ce662fe4be6fbc2595d9ef4888b2b6e778c99ed
2	https://git.kernel.org/stable/c/9a2bc9b6f929a2ce1ebe4d1a796ddab37568c5b4
3	https://git.kernel.org/stable/c/6a5ca0ab94e13a1474bf7ad8437a975c2193618f
4	https://git.kernel.org/stable/c/b01793cc63dd39c8f12b9a3d8dc115fbebb19e2a
5	https://git.kernel.org/stable/c/ce7a3a62cc533c922072f328fd2ea2fd7cb893d4
6	https://git.kernel.org/stable/c/e25fbcd97cf52c3c9824d44b5c56c19673c3dd50
7	https://git.kernel.org/stable/c/59ac565c6277d4be6661e81ea6a7f3ca2c5e4e36

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性

Title	Linux の Linux Kernel における例外的な状態のチェックに関する脆弱性
Summary	Linux の Linux Kernel には、例外的な状態のチェックに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 10, 2024, midnight
Registration Date	Dec. 11, 2024, 3:01 p.m.
Last Update	Aug. 21, 2025, 1:29 p.m.

Affected System

Linux

Linux Kernel 5.11 以上 5.15.168 未満

Linux Kernel 5.16 以上 6.1.113 未満

Linux Kernel 5.3 以上 5.4.285 未満

Linux Kernel 5.5 以上 5.10.227 未満

Linux Kernel 6.2 以上 6.6.57 未満

Linux Kernel 6.7 以上 6.11.4 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50184	https://www.cve.org/CVERecord?id=CVE-2024-50184
National Vulnerability Database (NVD)
2	CVE-2024-50184	https://nvd.nist.gov/vuln/detail/CVE-2024-50184

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-754	https://cwe.mitre.org/data/definitions/754.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	virtio_pmem: Check device status before requesting flush (4ce662f)	https://git.kernel.org/stable/c/4ce662fe4be6fbc2595d9ef4888b2b6e778c99ed
2	virtio_pmem: Check device status before requesting flush (59ac565)	https://git.kernel.org/stable/c/59ac565c6277d4be6661e81ea6a7f3ca2c5e4e36
3	virtio_pmem: Check device status before requesting flush (6a5ca0a)	https://git.kernel.org/stable/c/6a5ca0ab94e13a1474bf7ad8437a975c2193618f
4	virtio_pmem: Check device status before requesting flush (9a2bc9b)	https://git.kernel.org/stable/c/9a2bc9b6f929a2ce1ebe4d1a796ddab37568c5b4
5	virtio_pmem: Check device status before requesting flush (b01793c)	https://git.kernel.org/stable/c/b01793cc63dd39c8f12b9a3d8dc115fbebb19e2a
6	virtio_pmem: Check device status before requesting flush (ce7a3a6)	https://git.kernel.org/stable/c/ce7a3a62cc533c922072f328fd2ea2fd7cb893d4
7	virtio_pmem: Check device status before requesting flush (e25fbcd)	https://git.kernel.org/stable/c/e25fbcd97cf52c3c9824d44b5c56c19673c3dd50
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年12月11日] 掲載	Dec. 11, 2024, 10:27 a.m.
2	[2025年08月21日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 21, 2025, 1:28 p.m.