PT-2024-33929 · Linux+2 · Linux Kernel+2

Guenter Roeck · Published 2024-11-05 · Updated 2025-10-03 · CVE-2024-50097

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue arises from the unconditional call to fec ptp save state(), which can cause the kernel to panic on platforms that do not support PTP, such as i.MX25 and i.MX27. This happens because fec ptp init() is not called on these platforms, resulting in uninitialized related members in fep. To resolve this, a condition has been added to prevent fec ptp save state() from being called if PTP is not supported.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-17211

ALT-PU-2025-12647

BDU:2025-03367

CVE-2024-50097

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

Affected Products

Alt Linux

Linux Kernel

Red Os

References · 529

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50097.json · Exploit
• https://ubuntu.com/security/CVE-2024-50097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-50097 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50097 · Vendor Advisory
• https://git.kernel.org/stable/c/7745e14f4c036ce94a5eb05d06e49b0d84b306f9 · Patch
• https://bdu.fstec.ru/vul/2025-03367 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-50097 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-50097 · Security Note
• https://git.kernel.org/stable/c/3192e8d4a1ef9fc9bd7a59cdce51543367e5edd6 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:14705-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6be063071a457767ee229db13f019c2ec03bfe44 · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-50097 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14500-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-50097 · Vendor Advisory
• https://suse.com/security/cve/CVE-2024-50179 · Note