CVE-2024-50204

MEDIUM

Linux Kernel 6.11-6.11.5 - Denial of Service via Namespace Copy RBTree Removal

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: fs: don't try and remove empty rbtree node When copying a namespace we won't have added the new copy into the namespace rbtree until after the copy succeeded. Calling free_mnt_ns() will try to remove the copy from the rbtree which is invalid. Simply free the namespace skeleton directly.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/a8b155a2c30dc9a5ba837aa5fcba9a47cc031a9b

Patch

https://git.kernel.org/stable/c/229fd15908fe1f99b1de4cde3326e62d1e892611

Scores

CVSS v3 5.5

EPSS 0.0018

EPSS Percentile 7.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (9)

linux/Kernel 6.11.0 - 6.11.6linux

Linux/Linux < 6.11

Linux/Linux 1901c92497bd90caf608a474f1bf4d8795b372a2 - 229fd15908fe1f99b1de4cde3326e62d1e892611

Linux/Linux 1901c92497bd90caf608a474f1bf4d8795b372a2 - a8b155a2c30dc9a5ba837aa5fcba9a47cc031a9b

Linux/Linux 6.11

Linux/Linux 6.11.6 - 6.11.*

Linux/Linux 6.12

linux/linux_kernel 6.12 rc1 (4 CPE variants)

linux/linux_kernel 6.11 - 6.11.6

Published Nov 08, 2024

Tracked Since Feb 18, 2026