PT-2024-34025 · Linux+7 · Linux Kernel+7

Christian Brauner · Published 2024-11-07 · Updated 2026-03-14 · CVE-2024-50191

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, related to the ext4 filesystem. When the filesystem is mounted with errors=remount-ro, the code previously set the SB RDONLY flag to stop all filesystem modifications. However, this approach missed proper locking and did not follow the proper filesystem remount procedure. The issue was triggered by syzbot, which found a way to cause warnings in filesystem freezing due to the SB RDONLY flag changing. The fix involves stopping the modification of SB RDONLY, as setting EXT4 FLAGS SHUTDOWN on the superblock is sufficient to stop all filesystem modifications.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2024-17211

ALT-PU-2025-12647

BDU:2025-03494

CVE-2024-50191

DLA-4008-1

INFSA-2025_6966

OESA-2024-2492

OESA-2025-1079

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

RHSA-2025:6966

RHSA-2025_6966

USN-7166-1

USN-7166-2

USN-7166-3

USN-7166-4

USN-7186-1

USN-7186-2

USN-7194-1

USN-7276-1

USN-7277-1

USN-7310-1

USN-7383-1

USN-7383-2

USN-7384-1

USN-7384-2

USN-7385-1

USN-7386-1

USN-7403-1

USN-7451-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Ubuntu

References · 2050

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50191.json · Exploit
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49929 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53181 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47660 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56652 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53231 · Security Note
• https://ubuntu.com/security/CVE-2024-44974 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50108 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57925 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47685 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47141 · Vendor Advisory