CVE-2024-50127

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50127
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50127.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50127
Downstream
Related
Published
2024-11-05T17:10:54.385Z
Modified
2026-05-07T04:18:44.531462Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
net: sched: fix use-after-free in taprio_change()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: sched: fix use-after-free in taprio_change()

In 'tapriochange()', 'admin' pointer may become dangling due to sched switch / removal caused by 'advancesched()', and critical section protected by 'q->currententrylock' is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer 'rcureplacepointer()' over 'rcuassignpointer()' to update 'admin' immediately before an attempt to schedule freeing.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50127.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a3d43c0d56f1b94e74963a2fbadfb70126d92213
Fixed
2f868ce6013548a713c431c679ef73747a66fcf3
Fixed
8a283a19026aaae8a773fd8061263cfa315b127f
Fixed
999612996df28d81f163dad530d7f8026e03aec6
Fixed
fe371f084073e8672a2d7d46b335c3c060d1e301
Fixed
0d4c0d2844e4eac3aed647f948fd7e60eea56a61
Fixed
2240f9376f20f8b6463232b4ca7292569217237f
Fixed
f504465970aebb2467da548f7c1efbbf36d0f44b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50127.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.4.285
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.229
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.170
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.115
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.59
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50127.json"