What is CVE-2024-50159?

CVE-2024-50159 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10. CVE-2024-50159 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-50159?

CVE-2024-50159 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2024-50159?

No patch is currently available for CVE-2024-50159. Monitor the NIST NVD and your Linux distribution's security advisories for updates.

Is CVE-2024-50159 actively exploited?

CVE-2024-50159 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-50159

High

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup() Clang static checker(scan-build) throws below warning： | drivers/firmware/arm_scmi/driver.c:line 2915, column 2 | Attempt to free released memory. When devm_add_action_or_reset() fails, scmi_debugfs_common_cleanup() will run twice which causes double free of 'dbg->name'. Remove the redundant scmi_debugfs_common_cleanup() to fix this problem.

Package Linux Kernel

Published 2024-11-07

Last modified 2024-11-19

CVSS version 3.1

Patch available

Awaiting data

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-415

CVE-2024-50159 is classified as CWE-415

See CWE-415 on MITRE CWE for full details on this weakness type.

References

The following references provide additional information about CVE-2024-50159 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/39b13dce1a91cdfc3bec9238f9e89094551bd428
Patch
Kernel patch commit
https://git.kernel.org/stable/c/6d91d07913aee90556362d648d6a28a1eda419dc
Patch
Kernel patch commit
https://git.kernel.org/stable/c/fb324fdaf546bf14bc4c17e0037bca6cb952b121
Patch

Details

CVE ID CVE-2024-50159

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-11-07

Modified 2024-11-19

KEV No

Patch Awaiting data

Package linux

Frequently asked questions

What is CVE-2024-50159?

CVE-2024-50159 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . CVE-2024-50159 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-50159?

CVE-2024-50159 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2024-50159?

No patch is currently available for CVE-2024-50159. Monitor the NIST NVD and your Linux distribution's security advisories for updates.
Is CVE-2024-50159 actively exploited?

No — CVE-2024-50159 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.