cbcvebase.
CVE-2024-50215
published 2024-11-09

CVE-2024-50215: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across…

PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.25%
17.0th percentile
In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: assign dh_key to NULL after kfree_sensitive ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup() for the same controller. So it's better to nullify it after release on error path in order to avoid double free later in nvmet_destroy_auth(). Found by Linux Verification Center (linuxtesting.org) with Svace.

Affected

18 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.119-1 (bookworm)linux 6.1.119-1 (bookworm)
debianlinux-6.1< linux 6.1.119-1 (bookworm)linux 6.1.119-1 (bookworm)
linuxlinux
linuxlinux>= 7a277c37d3522e9b2777d762bbbcecafae2b1f8d < c94e965f766321641ec38e4eece9ce8884543244c94e965f766321641ec38e4eece9ce8884543244
linuxlinux>= 7a277c37d3522e9b2777d762bbbcecafae2b1f8d < c60af16e1d6cc2237d58336546d6adfc067b6b8fc60af16e1d6cc2237d58336546d6adfc067b6b8f
linuxlinux>= 7a277c37d3522e9b2777d762bbbcecafae2b1f8d < e61bd51e44409495d75847e9230736593e4c8710e61bd51e44409495d75847e9230736593e4c8710
linuxlinux>= 7a277c37d3522e9b2777d762bbbcecafae2b1f8d < d2f551b1f72b4c508ab9298419f6feadc3b5d791d2f551b1f72b4c508ab9298419f6feadc3b5d791
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.119-16.1.119-1
linuxlinux_kernel>= 0 < 6.11.7-16.11.7-1
linuxlinux_kernel>= 0 < 6.11.7-16.11.7-1
linuxlinux_kernel>= 0 < 6.8.0-58.606.8.0-58.60
linuxlinux_kernel>= 0 < 6.11.0-18.186.11.0-18.18
linuxlinux_kernel>= 6.0 < 6.1.1166.1.116
linuxlinux_kernel>= 6.2 < 6.6.606.6.60
linuxlinux_kernel>= 6.7 < 6.11.76.11.7
msrcazl3_kernel_6.6.57.1-7_on_azure_linux_3.0
msrcazl3_kernel_6.6.64.2-1_on_azure_linux_3.0

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.