PT-2024-33911 · Linux+3 · Linux Kernel+3

Published

2024-10-17

·

Updated

2025-09-29

·

CVE-2024-50079

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.12.0-rc3-00113-g8d020023b155
Description: The issue arises when the sqpoll is exiting and cancels pending work items, potentially requiring the execution of task work. If this occurs within io uring cancel generic(), it may lead to waiting for the io uring task waitqueue, resulting in an attempt to grab the ring mutex while in a TASK INTERRUPTIBLE state. This can trigger a warning from the scheduler. The problem is resolved by ensuring the task state is set to TASK RUNNING when running task work, similar to other cases in io run task work().
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-17211
BDU:2025-14132
CVE-2024-50079
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Ubuntu