CVE-2024-50080 — ublk: don't allow user copy for unprivileged device
In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on …
Published: 2024-10-29 · CVSS: 5.5 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ublk: don't allow user copy for unprivileged device UBLK_F_USER_COPY requires userspace to call write() on ublk char device for filling request buffer, and unprivileged device can't be trusted. So don't allow user copy for unprivileged device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7