What is CVE-2024-50209?

CVE-2024-50209 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 5.7 onward and patched in 5.10.229, 5.15.170, 6.1.115 and others. CVE-2024-50209 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-50209?

CVE-2024-50209 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2024-50209?

Yes, CVE-2024-50209 has been patched. Fixed versions include 5.10.229, 5.15.170, 6.1.115 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-50209 actively exploited?

CVE-2024-50209 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-50209

High

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a check for memory allocation __alloc_pbl() can return error when memory allocation fails. Driver is not checking the status on one of the instances.

Package Linux Kernel

Published 2024-11-08

Last modified 2025-11-03

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected versions

Linux kernel versions 5.7 and later are affected. Fixed in 5.10.229, 5.15.170, 6.1.115, 6.6.59, 6.11.6, 6.12 and their respective stable series.

Affected from

≥ 5.7

Fixed in

✓ 5.10.229 5.10.x ✓ 5.15.170 5.15.x ✓ 6.1.115 6.1.x ✓ 6.6.59 6.6.x ✓ 6.11.6 6.11.x ✓ 6.12

References

8 total

Kernel Git
https://git.kernel.org/stable/c/322a19baaaa25a1fe8ce9fceaed9409ad847844c

Patch
Kernel Git
https://git.kernel.org/stable/c/76dd679c3b148d23f72dcf6c3cde3d5f746b2c07

Patch
Kernel Git
https://git.kernel.org/stable/c/ba9045887b435a4c5551245ae034b8791b4e4aaa

Patch
Kernel Git
https://git.kernel.org/stable/c/c5c1ae73b7741fa3b58e6e001b407825bb971225

Patch
Kernel Git
https://git.kernel.org/stable/c/c71957271f2e8133a6aa82001c2fa671d5008129

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2024-50209

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-11-08

Modified 2025-11-03

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-50209?

CVE-2024-50209 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 5.7 onward and has been patched in 5.10.229, 5.15.170, 6.1.115 and others. CVE-2024-50209 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-50209?

CVE-2024-50209 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2024-50209?

Yes. CVE-2024-50209 has been patched. Fixed versions include 5.10.229, 5.15.170, 6.1.115 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-50209 actively exploited?

No. CVE-2024-50209 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.