In the Linux kernel, the following vulnerability has been resolved:
net: Fix an unsafe loop on the list
The kernel may crash when deleting a genetlink family if there are still
listeners for that family:
Oops: Kernel access of bad area, sig: 11 [#1]
...
NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0
LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0
Call Trace:
__netlink_clear_multicast_users+0x74/0xc0
genl_unregister_family+0xd4/0x2d0
Change the unsafe loop on the list to a safe one, because inside the
loop there is an element removal from this list.
References
Configurations
Configuration 1 (hide)
|
History
08 Nov 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
04 Nov 2024, 18:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
25 Oct 2024, 15:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/1cdec792b2450105b1314c5123a9a0452cb2c2f0 - Patch | |
| References | () https://git.kernel.org/stable/c/1dae9f1187189bc09ff6d25ca97ead711f7e26f9 - Patch | |
| References | () https://git.kernel.org/stable/c/3be342e0332a7c83eb26fbb22bf156fdca467a5d - Patch | |
| References | () https://git.kernel.org/stable/c/49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd - Patch | |
| References | () https://git.kernel.org/stable/c/5f03a7f601f33cda1f710611625235dc86fd8a9e - Patch | |
| References | () https://git.kernel.org/stable/c/68ad5da6ca630a276f0a5c924179e57724d00013 - Patch |
23 Oct 2024, 15:12
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
21 Oct 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-21 20:15
Updated : 2024-11-08 16:15
NVD link : CVE-2024-50024
Mitre link : CVE-2024-50024
CVE.ORG link : CVE-2024-50024
JSON object : View
Products Affected
linux
- linux_kernel
CWE