CVE-2024-50294
- Source
- https://cve.org/CVERecord?id=CVE-2024-50294
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50294.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-50294
- Downstream
- Related
- Published
- 2024-11-19T01:30:40.699Z
- Modified
- 2026-03-20T12:38:16.583352Z
- Severity
-
- 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- rxrpc: Fix missing locking causing hanging calls
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix missing locking causing hanging calls
If a call gets aborted (e.g. because kafs saw a signal) between it being queued for connection and the I/O thread picking up the call, the abort will be prioritised over the connection and it will be removed from local->newclientcalls by rxrpcdisconnectclient_call() without a lock being held. This may cause other calls on the list to disappear if a race occurs.
Fix this by taking the clientcalllock when removing a call from whatever list its ->wait_link happens to be on.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50294.json" }- References
-
- https://git.kernel.org/stable/c/996a7208dadbf2cdda8d51444d5ee1fdd1ccbc92
- https://git.kernel.org/stable/c/b1fdb0bb3b6513f5bd26f92369fd6ac1a2422d8b
- https://git.kernel.org/stable/c/fc9de52de38f656399d2ce40f7349a6b5f86e787
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50294.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-50294
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git