NVD Vulnerability Detail

CVE-2024-50024

Summary	In the Linux kernel, the following vulnerability has been resolved: net: Fix an unsafe loop on the list The kernel may crash when deleting a genetlink family if there are still listeners for that family: Oops: Kernel access of bad area, sig: 11 [#1] ... NIP [c000000000c080bc] netlink_update_socket_mc+0x3c/0xc0 LR [c000000000c0f764] __netlink_clear_multicast_users+0x74/0xc0 Call Trace: __netlink_clear_multicast_users+0x74/0xc0 genl_unregister_family+0xd4/0x2d0 Change the unsafe loop on the list to a safe one, because inside the loop there is an element removal from this list.
Publication Date	Oct. 22, 2024, 5:15 a.m.
Registration Date	Oct. 22, 2024, noon
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/68ad5da6ca630a276f0a5c924179e57724d00013	Patch
2	https://git.kernel.org/stable/c/1cdec792b2450105b1314c5123a9a0452cb2c2f0	Patch
3	https://git.kernel.org/stable/c/5f03a7f601f33cda1f710611625235dc86fd8a9e	Patch
4	https://git.kernel.org/stable/c/3be342e0332a7c83eb26fbb22bf156fdca467a5d	Patch
5	https://git.kernel.org/stable/c/49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd	Patch
6	https://git.kernel.org/stable/c/1dae9f1187189bc09ff6d25ca97ead711f7e26f9	Patch
7	https://git.kernel.org/stable/c/464801a0f6ccb52b21faa33bac6014fd74cc5e10
8	https://git.kernel.org/stable/c/8e0766fcf37ad8eed289dd3853628dd9b01b58b0

Common Vulnerabilities List

JVN Vulnerability Information

Linux の Linux Kernel における脆弱性

Title	Linux の Linux Kernel における脆弱性
Summary	Linux の Linux Kernel には、不特定の脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 4, 2024, midnight
Registration Date	Oct. 28, 2024, 5:58 p.m.
Last Update	Aug. 21, 2025, 12:16 p.m.

Affected System

Linux

Linux Kernel 2.6.32 以上 5.10.227 未満

Linux Kernel 5.11 以上 5.15.168 未満

Linux Kernel 5.16 以上 6.1.113 未満

Linux Kernel 6.12

Linux Kernel 6.2 以上 6.6.57 未満

Linux Kernel 6.7 以上 6.11.4 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50024	https://www.cve.org/CVERecord?id=CVE-2024-50024
National Vulnerability Database (NVD)
2	CVE-2024-50024	https://nvd.nist.gov/vuln/detail/CVE-2024-50024

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-noinfo	https://www.ipa.go.jp/security/vuln/scap/cwe.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	net: Fix an unsafe loop on the list (1cdec79)	https://git.kernel.org/stable/c/1cdec792b2450105b1314c5123a9a0452cb2c2f0
2	net: Fix an unsafe loop on the list (1dae9f1)	https://git.kernel.org/stable/c/1dae9f1187189bc09ff6d25ca97ead711f7e26f9
3	net: Fix an unsafe loop on the list (3be342e)	https://git.kernel.org/stable/c/3be342e0332a7c83eb26fbb22bf156fdca467a5d
4	net: Fix an unsafe loop on the list (49f9b72)	https://git.kernel.org/stable/c/49f9b726bf2bf3dd2caf0d27cadf4bc1ccf7a7dd
5	net: Fix an unsafe loop on the list (5f03a7f)	https://git.kernel.org/stable/c/5f03a7f601f33cda1f710611625235dc86fd8a9e
6	net: Fix an unsafe loop on the list (68ad5da)	https://git.kernel.org/stable/c/68ad5da6ca630a276f0a5c924179e57724d00013
Linux Kernel
7	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年10月28日] 掲載	Oct. 28, 2024, 5:58 p.m.
2	[2025年08月21日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 21, 2025, 12:14 p.m.