CVE-2024-50270

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damon_feed_loop_next_input() damon_feed_loop_next_input() is inefficient and fragile to overflows. Specifically, 'score_goal_diff_bp' calculation can overflow when 'score' is high. The calculation is actually unnecessary at all because 'goal' is a constant of value 10,000. Calculation of 'compensation' is again fragile to overflow. Final calculation of return value for under-achiving case is again fragile to overflow when the current score is under-achieving the target. Add two corner cases handling at the beginning of the function to make the body easier to read, and rewrite the body of the function to avoid overflows and the unnecessary bp value calcuation.

• CWE-190
• CWE-190

• https://git.kernel.org/stable/c/2d339a1f0f16ff5dea58e612ff336f0be0d041e9Patch
• https://git.kernel.org/stable/c/4401e9d10ab0281a520b9f8c220f30f60b5c248fPatch

Published

Nov 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50264In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50265In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50266In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50267In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50268In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-50269In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50271In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50272In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50273In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50274In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-50275In the Linux kernel, the following vulnerability has been re…7
• CVE-2024-50276In the Linux kernel, the following vulnerability has been re…7.8