Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Anastasia Kovaleva

Researcher fromYadro
#45906of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2024-33865
5.5
2024-10-21
Linux · Linux Kernel · CVE-2024-50024
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to an unsafe loop on the list in the Linux kernel, which can cause the kernel to crash when deleting a genetlink family if there are still listeners for that family. This can lead to a kernel access of bad area, resulting in a crash. The problem is caused by an element removal from the list inside the loop. Recommendations: For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting the deletion of genetlink families when there are still listeners for that family to minimize the risk of kernel crash.