PT-2024-34128 · Linux+3 · Linux Kernel+3

Gregory Price · Published 2024-10-28 · Updated 2025-09-29 · CVE-2024-50303

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, where the walk system ram res rev function erroneously discards resource flags when passing information to the callback. This causes systems with IORESOURCE SYSRAM DRIVER MANAGED memory to have these resources selected during kexec to store kexec buffers if that memory happens to be placed above normal system ram. This leads to undefined behavior after reboot, potentially causing system crashes or undefined behavior if the kexec buffer is touched.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-17211

BDU:2025-14148

CVE-2024-50303

USN-7276-1

USN-7277-1

USN-7310-1

USN-7449-1

USN-7449-2

USN-7450-1

USN-7451-1

USN-7452-1

USN-7453-1

USN-7468-1

USN-7523-1

USN-7524-1

Affected Products

Alt Linux

Linuxmint

Linux Kernel

Ubuntu

References · 1087

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50303.json · Exploit
• https://git.kernel.org/stable/c/dc9031b7919bd346514ea9a720f433b8daf3970d · Patch
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49943 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50211 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory