CVE-2024-50062CWE-476

CVE-2024-50062

High · published October 22, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rtrs-srv: Avoid null pointer deref during path establishment

For RTRS path establishment, RTRS client initiates and completes con_num

of connections. After establishing all its connections, the information

is exchanged between the client and server through the info_req message.

During this exchange, it is essential that all connections have been

established, and the state of the RTRS srv path is CONNECTED.

So add these sanity checks, to make sure we detect and abort process in

error scenarios to avoid null pointer deref.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-10-22T00:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 5.15.1685.15.168
linux/linux_kernel≥ 5.16, < 6.1.1136.1.113
linux/linux_kernel≥ 6.2, < 6.6.576.6.57
linux/linux_kernel≥ 6.7, < 6.11.46.11.4
References (6)
EPSS history
Timeline
  • 21 OCT 19:39Z
    RDMA/rtrs-srv: Avoid null pointer deref during path establishment
    cvelistv5