CVE-2024-50204: fs: don't try and remove empty rbtree node
In the Linux kernel, the following vulnerability has been resolved:
fs: don't try and remove empty rbtree node
When copying a namespace we won't have added the new copy into the namespace rbtree until after the copy succeeded. Calling freemntns() will try to remove the copy from the rbtree which is invalid. Simply free the namespace skeleton directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50204?
The severity of CVE-2024-50204 has not been specifically ranked but it affects the Linux kernel's ability to handle namespace copying.
How do I fix CVE-2024-50204?
To fix CVE-2024-50204, update your Linux kernel to version 6.11.6 or later.
Which versions of the Linux kernel are affected by CVE-2024-50204?
CVE-2024-50204 affects Linux kernel versions from 6.11 up to 6.11.6 and 6.12-rc1 through 6.12-rc4.
What could happen if I do not patch CVE-2024-50204?
If not patched, CVE-2024-50204 may lead to instability in namespace management within the Linux kernel.
Is there a workaround for CVE-2024-50204?
Currently, there are no known workarounds for CVE-2024-50204, making patching the only solution.