CVE-2024-50062
mediumpriority · track · 22EPSS 0.005 · 43 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Avoid null pointer deref during path establishment For RTRS path establishment, RTRS client initiates and completes con_num of connections. After establishing all its connections, the information is exchanged between the client and server through the info_req message. During this exchange, it is essential that all connections have been established, and the state of the RTRS srv path is CONNECTED. So add these sanity checks, to make sure we detect and abort process in error scenarios to avoid null pointer deref.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (99)
Products and version ranges known to be affected.
- NetApp AFF Baseboard Management Controllerall versionscert_bundDEcpe:/h:netapp:aff:::baseboard_management_controller
- NetApp ActiveIQ Unified Manager for VMware vSphereall versionscert_bundDEcpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
- NetApp FAS Baseboard Management Controllerall versionscert_bundDEcpe:/h:netapp:fas:baseboard_management_controller
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-3251Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2024-10-21csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher bekannte Auswirkungen zu erzielen..
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (18)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/394b2f4d5e014820455af3eb5859eb328eaafcfdcnnvd
- https://git.kernel.org/stable/c/b5d4076664465487a9a3d226756995b12fb73d71cnnvd
- https://git.kernel.org/stable/c/b720792d7e8515bc695752e0ed5884e2ea34d12acnnvd
- https://git.kernel.org/stable/c/ccb8e44ae3e2391235f80ffc6be59bec6b889eadcnnvd
- https://git.kernel.org/stable/c/d0e62bf7b575fbfe591f6f570e7595dd60a2f5ebcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2024-50062cnnvd
- https://vigilance.fr/vulnerability/Linux-kernel-multiple-vulnerabilities-dated-22-10-2024-45441cnnvd
- https://git.kernel.org/stable/c/394b2f4d5e014820455af3eb5859eb328eaafcfdenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan