What is CVE-2024-50149?

CVE-2024-50149 is a medium-severity vulnerability in Linux, classified under Use After Free. CVSS score: 5.5/10. Published 2024-11-07.

How severe is CVE-2024-50149?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Use After Free in Linux

CVE-2024-50149

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't free job in TDR Freeing job in TDR is not safe as TDR can pass the run_job thread resulting in UAF. It is only safe for free job to naturally be called by the scheduler. Rather free job in TDR, add to pending list. (cherry picked from commit ea2f6a77d0c40d97f4a4dc93fee4afe15d94926d)

Vulnerability class: Use-After-Free

EPSS: 0.002 (10.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions e275d61c5f3ffc250b2a9601d36fbd11b4db774b, 6.10, 0
Linux Linux_kernel — versions 6.12

Weakness classification (CWE)

CWE-416 — Use After Free

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-50149?: CVE-2024-50149 is a medium-severity vulnerability in Linux, classified under Use After Free. CVSS score: 5.5/10. Published 2024-11-07.
How severe is CVE-2024-50149?: Medium severity. CVSS v3 base score is 5.5 out of 10.