CVE - CVE-2024-50127

CVE-ID
CVE-2024-50127	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may become dangling due to sched switch / removal caused by 'advance_sched()', and critical section protected by 'q->current_entry_lock' is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update 'admin' immediately before an attempt to schedule freeing.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0d4c0d2844e4eac3aed647f948fd7e60eea56a61 URL:https://git.kernel.org/stable/c/0d4c0d2844e4eac3aed647f948fd7e60eea56a61 MISC:https://git.kernel.org/stable/c/2240f9376f20f8b6463232b4ca7292569217237f URL:https://git.kernel.org/stable/c/2240f9376f20f8b6463232b4ca7292569217237f MISC:https://git.kernel.org/stable/c/999612996df28d81f163dad530d7f8026e03aec6 URL:https://git.kernel.org/stable/c/999612996df28d81f163dad530d7f8026e03aec6 MISC:https://git.kernel.org/stable/c/f504465970aebb2467da548f7c1efbbf36d0f44b URL:https://git.kernel.org/stable/c/f504465970aebb2467da548f7c1efbbf36d0f44b MISC:https://git.kernel.org/stable/c/fe371f084073e8672a2d7d46b335c3c060d1e301 URL:https://git.kernel.org/stable/c/fe371f084073e8672a2d7d46b335c3c060d1e301
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)