« Volver al listado

CVE-2024-50210

Estado: ModificadaMedia (5.5)—

In the Linux kernel, the following vulnerability has been resolved:

posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()

If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error path should release the lock to make the lock balance and fput the clockid's fd to make the refcount balance and release the fd related resource.

However the below commit left the error path locked behind resulting in unbalanced locking. Check timespec64_valid_strict() before get_clock_desc() to fix it, because the "ts" is not changed after that.

[pabeni@redhat.com: fixed commit message typo]

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Linux — Linux Kernel

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-50210",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-50210",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-10-01T20:17:22.253155Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "29f085345cde24566efb751f39e5d367c381c584",
              "lessThan": "d005400262ddaf1ca1666bbcd1acf42fe81d57ce",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "e0c966bd3e31911b57ef76cec4c5796ebd88e512",
              "lessThan": "a8219446b95a859488feaade674d13f9efacfa32",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "673a1c5a2998acbd429d6286e6cad10f17f4f073",
              "lessThan": "c7fcfdba35abc9f39b83080c2bce398dad13a943",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c8789fbe2bbf75845e45302cba6ffa44e1884d01",
              "lessThan": "e56e0ec1b79f5a6272c6e78b36e9d593aa0449af",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "27abbde44b6e71ee3891de13e1a228aa7ce95bfe",
              "lessThan": "5f063bbf1ee6b01611c016b54e050a41506eb794",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a3f169e398215e71361774d13bf91a0101283ac2",
              "lessThan": "1ba33b327c3f88a7baee598979d73ab5b44d41cc",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1ff7247101af723731ea42ed565d54fb8f341264",
              "lessThan": "b27330128eca25179637c1816d5a72d6cc408c66",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d8794ac20a299b647ba9958f6d657051fc51a540",
              "lessThan": "6e62807c7fbb3c758d233018caf94dfea9c65dbd",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "kernel/time/posix-clock.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.10.228",
              "lessThan": "5.10.229",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "5.15.169",
              "lessThan": "5.15.170",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.1.114",
              "lessThan": "6.1.115",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.6.58",
              "lessThan": "6.6.59",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "6.11.5",
              "lessThan": "6.11.6",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "kernel/time/posix-clock.c"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "*",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-11-08T06:15:17.350",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1ba33b327c3f88a7baee598979d73ab5b44d41cc",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/5f063bbf1ee6b01611c016b54e050a41506eb794",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6e62807c7fbb3c758d233018caf94dfea9c65dbd",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a8219446b95a859488feaade674d13f9efacfa32",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b27330128eca25179637c1816d5a72d6cc408c66",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c7fcfdba35abc9f39b83080c2bce398dad13a943",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d005400262ddaf1ca1666bbcd1acf42fe81d57ce",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e56e0ec1b79f5a6272c6e78b36e9d593aa0449af",
      "tags": [
        "Patch"
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html",
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-667"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-667"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()\n\nIf get_clock_desc() succeeds, it calls fget() for the clockid's fd,\nand get the clk->rwsem read lock, so the error path should release\nthe lock to make the lock balance and fput the clockid's fd to make\nthe refcount balance and release the fd related resource.\n\nHowever the below commit left the error path locked behind resulting in\nunbalanced locking. Check timespec64_valid_strict() before\nget_clock_desc() to fix it, because the \"ts\" is not changed\nafter that.\n\n[pabeni@redhat.com: fixed commit message typo]"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: posix-clock: posix-clock: Corregir bloqueo desequilibrado en pc_clock_settime() Si get_clock_desc() tiene éxito, llama a fget() para el fd del clockid y obtiene el bloqueo de lectura clk->rwsem, por lo que la ruta de error debería liberar el bloqueo para equilibrar el bloqueo y fput el fd del clockid para equilibrar el refcount y liberar el recurso relacionado con el fd. Sin embargo, la siguiente confirmación dejó la ruta de error bloqueada, lo que resultó en un bloqueo desequilibrado. Verifique timespec64_valid_strict() antes de get_clock_desc() para corregirlo, porque el \"ts\" no se cambia después de eso. [pabeni@redhat.com: se corrigió un error tipográfico en el mensaje de confirmación]"
    }
  ],
  "lastModified": "2026-06-17T08:03:52.943",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CEF9F93-A67A-45C9-9C51-0024664ACC19",
              "versionEndExcluding": "5.11",
              "versionStartIncluding": "5.10.228"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:5.15.169:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "65E5B4C5-20C7-42FD-B670-6B09641CC073"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.1.114:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFC6719E-D39A-44B0-90DD-F606EE505404"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.6.58:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38BA5D36-31FC-4EF3-9E92-9B67AB6F2D42"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.11.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "101C7DA2-28FF-4CC0-A476-2C8D49CD2AC5"
            },
            {
              "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0F717D8-3014-4F84-8086-0124B2111379"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}