CVE-2024-50092

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50092

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net: netconsole: fix wrong warning A warning is triggered when there is insufficient space in the buffer for userdata. However, this is not an issue since userdata will be sent in the next iteration. Current warning message: ------------[ cut here ]------------ WARNING: CPU: 13 PID: 3013042 at drivers/net/netconsole.c:1122 write_ext_msg+0x3b6/0x3d0 ? write_ext_msg+0x3b6/0x3d0 console_flush_all+0x1e9/0x330 The code incorrectly issues a warning when this_chunk is zero, which is a valid scenario. The warning should only be triggered when this_chunk is negative.

References
Link Resource
https://git.kernel.org/stable/c/712a3af3710263444217df54e7f337f99df198d2 Patch
https://git.kernel.org/stable/c/d94785bb46b6167382b1de3290eccc91fa98df53 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
History

13 Nov 2024, 00:40

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 3.3
References () https://git.kernel.org/stable/c/712a3af3710263444217df54e7f337f99df198d2 - () https://git.kernel.org/stable/c/712a3af3710263444217df54e7f337f99df198d2 - Patch
References () https://git.kernel.org/stable/c/d94785bb46b6167382b1de3290eccc91fa98df53 - () https://git.kernel.org/stable/c/d94785bb46b6167382b1de3290eccc91fa98df53 - Patch

06 Nov 2024, 18:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: netconsole: fix wrong Warning Se activa una advertencia cuando no hay suficiente espacio en el búfer para los datos del usuario. Sin embargo, esto no es un problema ya que los datos del usuario se enviarán en la siguiente iteración. Mensaje de advertencia actual: ------------[ cut here ]------------ WARNING: CPU: 13 PID: 3013042 at drivers/net/netconsole.c:1122 write_ext_msg+0x3b6/0x3d0 ? write_ext_msg+0x3b6/0x3d0 console_flush_all+0x1e9/0x330 El código emite incorrectamente una advertencia cuando this_chunk es cero, lo cual es un escenario válido. La advertencia solo debería activarse cuando this_chunk es negativo.

05 Nov 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-05 17:15

Updated : 2025-10-01 21:15

NVD link : CVE-2024-50092

Mitre link : CVE-2024-50092

CVE.ORG link : CVE-2024-50092

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo