PT-2024-33837 · Linux+3 · Linux Kernel+3

Published

2024-09-27

·

Updated

2025-09-29

·

CVE-2024-49999

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A vulnerability in the Linux kernel has been resolved, related to the setting of the server responding flag in the afs wait for operation() function. The issue occurs when the loop exits after receiving a response from the server that has been discarded, potentially resulting in op->server being NULL. However, the code does not check for this condition before attempting to set the server flag.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2025-15046
CVE-2024-49999
INFSA-2025_6966
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
RHSA-2025:6966
RHSA-2025_6966
USN-7276-1
USN-7277-1
USN-7301-1
USN-7303-1
USN-7303-2
USN-7303-3
USN-7304-1
USN-7310-1
USN-7311-1
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1

Affected Products

Linuxmint
Linux Kernel
Red Hat
Ubuntu