PT-2024-34033 · Linux+7 · Linux Kernel+7

Liu Shixin · Published 2024-11-07 · Updated 2025-09-29 · CVE-2024-50199

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: A bug in the Linux kernel has been fixed, related to the handling of HugeTLB pages during swapoff operations. The issue can be reproduced by allocating an anonymous 1GB HugeTLB, swapping out the memory, and then running swapoff, resulting in a bad pud error. The error occurs because the HugeTLB pages are not properly freed from the page table, causing them to be lost. The problem can be fixed by skipping HugeTLB pages for unuse vma.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-04507

CVE-2024-50199

DLA-4008-1

DLA-4075-1

INFSA-2025_6966

OESA-2024-2535

OESA-2025-1065

OESA-2025-1066

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2025:14705-1

OPENSUSE-SU-2025_0428-1

OPENSUSE-SU-2025_0499-1

OPENSUSE-SU-2025_0517-1

OPENSUSE-SU-2025_0517-2

OPENSUSE-SU-2025_0556-1

OPENSUSE-SU-2025_0557-1

OPENSUSE-SU-2025_0576-1

OPENSUSE-SU-2025_0577-1

OPENSUSE-SU-2025_0771-1

RHSA-2025:6966

RHSA-2025_6966

SUSE-SU-2025:0236-1

SUSE-SU-2025:0289-1

SUSE-SU-2025:0428-1

SUSE-SU-2025:0499-1

SUSE-SU-2025:0555-1

SUSE-SU-2025:0556-1

SUSE-SU-2025:0557-1

SUSE-SU-2025:0576-1

SUSE-SU-2025:0577-1

SUSE-SU-2025:0577-2

SUSE-SU-2025:0771-1

SUSE-SU-2025:0867-1

SUSE-SU-2025:20165-1

SUSE-SU-2025:20166-1

SUSE-SU-2025:20248-1

SUSE-SU-2025:20249-1

SUSE-SU-2025_0236-1

SUSE-SU-2025_0428-1

SUSE-SU-2025_0499-1

SUSE-SU-2025_0517-1

SUSE-SU-2025_0517-2

SUSE-SU-2025_0557-1

SUSE-SU-2025_0576-1

SUSE-SU-2025_0577-1

SUSE-SU-2025_0577-2

USN-7276-1

USN-7277-1

USN-7288-1

USN-7288-2

USN-7289-1

USN-7289-2

USN-7289-3

USN-7289-4

USN-7291-1

USN-7293-1

USN-7294-1

USN-7294-2

USN-7294-3

USN-7294-4

USN-7295-1

USN-7305-1

USN-7308-1

USN-7310-1

USN-7331-1

USN-7383-1

USN-7383-2

USN-7384-1

USN-7384-2

USN-7385-1

USN-7386-1

USN-7388-1

USN-7389-1

USN-7390-1

USN-7393-1

USN-7401-1

USN-7403-1

USN-7413-1

USN-7451-1

USN-7458-1

USN-7468-1

USN-7523-1

USN-7524-1

USN-7539-1

USN-7540-1

Affected Products

Astra Linux

Debian

Linux Kernel

Linuxmint

Red Hat

Red Os

Suse

Ubuntu

References · 3365

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50199.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7291-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57895 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56780 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21649 · Vendor Advisory