PT-2024-34048

CVE-2024-50212

·

Published

2024-10-16

·

Updated

2025-09-26

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A vulnerability has been resolved in the Linux kernel where the alloc tag module unload function must wait for pending kfree rcu calls. This issue occurs when the nf nat module exit calls kfree rcu on addresses, but the free operation is still pending when alloc tag checks for leaks. Waiting for outstanding kfree rcu operations to complete before checking resolves this warning. A reproducer is provided using unshare, iptables-nft, and rmmod commands.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1
Found an issue in the description? Have something to add? Feel free to write us 👾