CVE-2024-50038 — Unsafe Reflection in Linux

CWE-470 — Unsafe Reflection48 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8
EPSS
0.0%
top 98.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
12
LinuxLinux KernelDebian Linux+9 more
Timeline
PublishedOct 21
Latest updateMay 26

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: avoid NFPROTO_UNSPEC where needed syzbot managed to call xt_cluster match via ebtables: WARNING: CPU: 0 PID: 11 at net/netfilter/xt_cluster.c:72 xt_cluster_mt+0x196/0x780 [..] ebt_do_table+0x174b/0x2a40 Module registers to NFPROTO_UNSPEC, but it assumes ipv4/ipv6 packet processing. As this is only useful to restrict locally terminating TCP/UDP traffic, register this for ipv4 and ipv6 family only. Pablo p…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages14 packages

▶NVDlinux/linux_kernel2.6.30 — 5.15.168+4
▶Debianlinux/linux_kernel< 6.1.115-1+2
▶Ubuntulinux/linux_kernel< 5.15.0-127.137+2

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

23
OSV
linux-raspi vulnerabilities↗2025-05-26
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-05-20
▶
OSV
linux-azure-nvidia vulnerabilities↗2025-04-28
▶
OSV
linux-aws-6.8 vulnerabilities↗2025-04-23
▶
OSV
linux-azure-6.8 vulnerabilities↗2025-04-01
▶

📋Vendor Advisories

24
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-05-26
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-05-20
▶
Ubuntu
Linux kernel (Azure, N-Series) vulnerabilities↗2025-04-28
▶
Ubuntu
Linux kernel vulnerabilities↗2025-04-23
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2025-04-01
▶
CVE-2024-50038 — Unsafe Reflection in Linux | cvebase