CVE-2024-50062 json
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
published 2024-10-21 2 y ago modified 2026-08-05 3 mo ago also EUVD-2024-44782
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 43%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
For RTRS path establishment, RTRS client initiates and completes con_num of connections. After establishing all its connections, the information is exchanged between the client and server through the info_req message. During this exchange, it is essential that all connections have been established, and the state of the RTRS srv path is CONNECTED.
So add these sanity checks, to make sure we detect and abort process in error scenarios to avoid null pointer deref.
Patch / fix
- Linux Linux 5.15.168, 6.1.113, 6.6.57, 6.11.4, 6.12
- linux Debian 12 6.1.115-1
- linux Debian 14, Debian 13 6.11.4-1
debian advisories DEBIAN-CVE-2024-50062
- linux Ubuntu 22.04 LTS 5.15.0-127.137
- linux Ubuntu 24.04 LTS 6.8.0-56.58
- linux-aws Ubuntu 22.04 LTS 5.15.0-1073.79
- linux-aws Ubuntu 24.04 LTS 6.8.0-1025.27
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1072.80
- linux-gcp Ubuntu 24.04 LTS 6.8.0-1026.28
- linux-gke Ubuntu 22.04 LTS 5.15.0-1070.76
- linux-gke Ubuntu 24.04 LTS 6.8.0-1021.25
ubuntu advisories UBUNTU-CVE-2024-50062
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-source Linux Micro 6.1, Linux Micro 6.0 6.4.0-24.1
- kernel-default Linux Micro 6.1, Linux Micro 6.0 6.4.0-24.1
- kernel-kvmsmall Linux Micro 6.1, Linux Micro 6.0 6.4.0-24.1
- kernel-default-base Linux Micro 6.1, Linux Micro 6.0 6.4.0-24.1.21.4
- kernel-livepatch-MICRO-6-0_Update_4 Linux Micro 6.1, Linux Micro 6.0 1-1.2
- kernel-rt Linux Micro 6.1, Linux Micro 6.0 6.4.0-22.1
- kernel-source-rt Linux Micro 6.1, Linux Micro 6.0 6.4.0-22.1
- kernel-livepatch-MICRO-6-0-RT_Update_4 Linux Micro 6.1, Linux Micro 6.0 1-1.1
suse advisories SUSE-SU-2025:20164-1SUSE-SU-2025:20247-1SUSE-SU-2025:20163-1SUSE-SU-2025:20246-1SUSE-SU-2024:4387-1SUSE-SU-2024:4376-1
- kernel-source-longterm openSUSE Tumbleweed 6.12.11-1.1
- kernel-source openSUSE Tumbleweed 6.11.8-1.1
opensuse advisories openSUSE-SU-2025:14705-1openSUSE-SU-2024:14500-1
- kernel CBL-Mariner 2.0 5.15.173.1-1
- kernel Azure Linux 3.0 6.6.57.1-1
azure linux advisories AZL-50719AZL-50886
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
- git.kernel.org/stable/c/394b2f4d5e014820455af3eb5859eb328eaafcfd commit
- git.kernel.org/stable/c/b5d4076664465487a9a3d226756995b12fb73d71 commit
- git.kernel.org/stable/c/ccb8e44ae3e2391235f80ffc6be59bec6b889ead commit
- git.kernel.org/stable/c/b720792d7e8515bc695752e0ed5884e2ea34d12a commit
- git.kernel.org/stable/c/d0e62bf7b575fbfe591f6f570e7595dd60a2f5eb commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-50062 updated cvss 5.5
kernel: RDMA/rtrs-srv: Avoid null pointer deref during path establishment
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.51% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Weakness
-
- CWE-476 NULL Pointer Dereference
- Technology feeds
References
-
git.kernel.org
/stable/c/394b2f4d5e014820455af3eb5859eb328eaafcfd
patch
-
git.kernel.org
/stable/c/b5d4076664465487a9a3d226756995b12fb73d71
patch
-
git.kernel.org
/stable/c/ccb8e44ae3e2391235f80ffc6be59bec6b889ead
patch
-
git.kernel.org
/stable/c/b720792d7e8515bc695752e0ed5884e2ea34d12a
patch
-
git.kernel.org
/stable/c/d0e62bf7b575fbfe591f6f570e7595dd60a2f5eb
patch
- lists.debian.org /debian-lts-announce/2025/01/msg00001.html
Sources
- CVE List CVE-2024-50062
- NVD CVE-2024-50062
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.