CVE-2024-50062
RDMA/rtrs-srv: Avoid null pointer deref during path establishment
Reported by linux · Published October 21, 2024
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes con_num of connections. After establishing all its connections, the information is exchanged between the client and server through the info_req message. During this exchange, it is essential that all connections have been established, and the state of the RTRS srv path is CONNECTED. So add these sanity checks, to make sure we detect and abort process in error scenarios to avoid null pointer deref.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.11.4, 6.6.57, 6.1.113, 5.15.168 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 9cb837480424e78ed585376f944088246685aec3, 9cb837480424e78ed585376f944088246685aec3, 9cb837480424e78ed585376f944088246685aec3 |
| Linux | Linux | 5.8, 0, 5.15.168 |
| linux | linux_kernel | 5.8, 5.8, 5.8 |
| Linux | Linux | 9cb837480424e78ed585376f944088246685aec3, 9cb837480424e78ed585376f944088246685aec3, 9cb837480424e78ed585376f944088246685aec3 |
Timeline
- Oct 21, 2024 CVE Published
- Oct 22, 2024 EPSS Score (30 in total, the first dated here)
- Oct 22, 2024 Coalition ESS Score (24 in total, the first dated here)
- Jan 2, 2026 Security Advisory (445 in total, the first dated here)
- Mar 30, 2026 Distribution Patch (377 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-50062
vulnetix vdb fixes CVE-2024-50062Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-50062/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart