CVE-2024-50000

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50000
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() In mlx5e_tir_builder_alloc() kvzalloc() may return NULL which is dereferenced on the next line in a reference to the modify field. Found by Linux Verification Center (linuxtesting.org) with SVACE.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0168ab6fbd9e50d20b97486168b604b2ab28a2ca Patch
https://git.kernel.org/stable/c/1bcc86cc721bea68980098f51f102aa2c2b9d932 Patch
https://git.kernel.org/stable/c/4655456a64a0f936098c8432bac64e7176bd2aff Patch
https://git.kernel.org/stable/c/4d80dde26d7bab1320210279483ac854dcb274b2 Patch
https://git.kernel.org/stable/c/b48ee5bb25c02ca2b81e0d16bf8af17ab6ed3f8b Patch
https://git.kernel.org/stable/c/f25389e779500cf4a59ef9804534237841bce536 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

25 Oct 2024, 19:55

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/0168ab6fbd9e50d20b97486168b604b2ab28a2ca - () https://git.kernel.org/stable/c/0168ab6fbd9e50d20b97486168b604b2ab28a2ca - Patch
References () https://git.kernel.org/stable/c/1bcc86cc721bea68980098f51f102aa2c2b9d932 - () https://git.kernel.org/stable/c/1bcc86cc721bea68980098f51f102aa2c2b9d932 - Patch
References () https://git.kernel.org/stable/c/4655456a64a0f936098c8432bac64e7176bd2aff - () https://git.kernel.org/stable/c/4655456a64a0f936098c8432bac64e7176bd2aff - Patch
References () https://git.kernel.org/stable/c/4d80dde26d7bab1320210279483ac854dcb274b2 - () https://git.kernel.org/stable/c/4d80dde26d7bab1320210279483ac854dcb274b2 - Patch
References () https://git.kernel.org/stable/c/b48ee5bb25c02ca2b81e0d16bf8af17ab6ed3f8b - () https://git.kernel.org/stable/c/b48ee5bb25c02ca2b81e0d16bf8af17ab6ed3f8b - Patch
References () https://git.kernel.org/stable/c/f25389e779500cf4a59ef9804534237841bce536 - () https://git.kernel.org/stable/c/f25389e779500cf4a59ef9804534237841bce536 - Patch
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

23 Oct 2024, 15:13

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: Se ha corregido la desreferenciación NULL en mlx5e_tir_builder_alloc(). En mlx5e_tir_builder_alloc(), kvzalloc() puede devolver NULL, que se desreferencia en la siguiente línea en una referencia al campo de modificación. Encontrado por Linux Verification Center (linuxtesting.org) con SVACE.

21 Oct 2024, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 18:15

Updated : 2025-11-03 23:16

NVD link : CVE-2024-50000

Mitre link : CVE-2024-50000

CVE.ORG link : CVE-2024-50000

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference