CVE-2024-50024

Published: Oct 21, 2024Modified: Aug 4, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may crash when deleting a genetlink family if there are still listeners for that family: Oops: Kernel access of bad area, sig: 11 [#1] ... NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0 LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0 Call Trace: __netlink_clear_multicast_users+0x74/0xc0 genl_unregister_family+0xd4/0x2d0 Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.

Affected (7)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.32 to 5.10.227
Linux Linux Kernel	From 5.11 to 5.15.168
Linux Linux Kernel	From 5.16 to 6.1.113
Linux Linux Kernel	From 6.2 to 6.6.57
Linux Linux Kernel	From 6.7 to 6.11.4
Linux Linux Kernel	Version 6.12 rc1
Linux Linux Kernel	Version 6.12 rc2