CVE-2024-50199

5.5 · MEDIUM

Published Nov 8, 2024 linux EPSS 0.22% (13th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-50199 is a medium-severity vulnerability affecting linux linux_kernel. It was published on November 8, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mm/swapfile: skip HugeTLB pages for unuse_vma

I got a bad pud error and lost a 1GB HugeTLB when calling swapoff. The

problem can be reproduced by the following steps:

1. Allocate an anonymous 1GB HugeTLB and some other anonymous memory.

2. Swapout the above anonymous memory.

3. run swapoff and we will get a bad pud error in kernel message:

mm/pgtable-generic.c:42: bad pud 00000000743d215d(84000001400000e7)

We can tell that pud_clear_bad is called by pud_none_or_clear_bad in

unuse_pud_range() by ftrace. And therefore the HugeTLB pages will never

be freed because we lost it from page table. We can skip HugeTLB pages

for unuse_vma to fix it.

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 2.6.36, < 5.4.285	Affected

References

Ref git.kernel.org/stable/c/417d5838ca73c6331ae2fe692fab6c25c00d9a0b Ref git.kernel.org/stable/c/6ec0fe3756f941f42f8c57156b8bdf2877b2ebaf Ref git.kernel.org/stable/c/7528c4fb1237512ee18049f852f014eba80bbe8d Ref git.kernel.org/stable/c/ba7f982cdb37ff5a7739dec85d7325ea66fc1496 Ref git.kernel.org/stable/c/bed2b9037806c62166a0ef9a559a1e7e3e1275b8 Ref git.kernel.org/stable/c/e41710f5a61aca9d6baaa8f53908a927dd9e7aa7 Ref git.kernel.org/stable/c/eb66a833cdd2f7302ee05d05e0fa12a2ca32eb87 Ref lists.debian.org/debian-lts-announce/2025/01/msg00001.html Ref lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Frequently Asked Questions

What is CVE-2024-50199?

CVE-2024-50199 is a medium-severity vulnerability affecting linux linux_kernel. It was published on November 8, 2024 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-50199?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-50199?

How can CyberStrike help with CVE-2024-50199?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-50199 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719