CVE-2024-50110

5.5 · MEDIUM

Published Nov 5, 2024 linux CWE-908 EPSS 0.26% (17th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Overview

CVE-2024-50110 is a medium-severity vulnerability affecting linux linux_kernel. It was published on November 5, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm: fix one more kernel-infoleak in algo dumping

During fuzz testing, the following issue was discovered:

BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x598/0x2a30

_copy_to_iter+0x598/0x2a30

__skb_datagram_iter+0x168/0x1060

skb_copy_datagram_iter+0x5b/0x220

netlink_recvmsg+0x362/0x1700

sock_recvmsg+0x2dc/0x390

__sys_recvfrom+0x381/0x6d0

__x64_sys_recvfrom+0x130/0x200

x64_sys_call+0x32c8/0x3cc0

do_syscall_64+0xd8/0x1c0

entry_SYSCALL_64_after_hwframe+0x79/0x81

Uninit was stored to memory at:

copy_to_user_state_extra+0xcc1/0x1e00

dump_one_state+0x28c/0x5f0

xfrm_state_walk+0x548/0x11e0

xfrm_dump_sa+0x1e0/0x840

netlink_dump+0x943/0x1c40

__netlink_dump_start+0x746/0xdb0

xfrm_user_rcv_msg+0x429/0xc00

netlink_rcv_skb+0x613/0x780

xfrm_netlink_rcv+0x77/0xc0

netlink_unicast+0xe90/0x1280

netlink_sendmsg+0x126d/0x1490

__sock_sendmsg+0x332/0x3d0

____sys_sendmsg+0x863/0xc30

___sys_sendmsg+0x285/0x3e0

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.11, < 5.15.170	Affected

References

Ref git.kernel.org/stable/c/1e8fbd2441cb2ea28d6825f2985bf7d84af060bb Ref git.kernel.org/stable/c/610d4cea9b442b22b4820695fc3335e64849725e Ref git.kernel.org/stable/c/6889cd2a93e1e3606b3f6e958aa0924e836de4d2 Ref git.kernel.org/stable/c/c73bca72b84b453c8d26a5e7673b20adb294bf54 Ref git.kernel.org/stable/c/dc2ad8e8818e4bf1a93db78d81745b4877b32972 Ref lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Frequently Asked Questions

What is CVE-2024-50110?

CVE-2024-50110 is a medium-severity vulnerability affecting linux linux_kernel. It was published on November 5, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-50110?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-50110?

How can CyberStrike help with CVE-2024-50110?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-50110 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719