01 Record

CVE-2024-50082

blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 13.2% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-10-29 00:50Z1 YR AGO

Last updated

2026-08-05 11:41Z1 MO AGO

Reserved

2024-10-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

acb27e0f733f0ab006684c36a862eb54d0d8aede2ed37e80a8d56fb9666c5bc6

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < d04b72c9ef2b0689bfc1057d21c4aeed087c329f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < 3bc6d0f8b70a9101456cf02ab99acb75254e1852, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < 455a469758e57a6fe070e3e342db12e4a629e0eb, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < b5e900a3612b69423a0e1b0ab67841a1fb4af80f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < 4c5b123ab289767afe940389dbb963c5c05e594e, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < 04f283fc16c8d5db641b6bffd2d8310aa7eccebc, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to < e972b08b91ef48488bae9789f03cfedb148667fb, 4.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d04b72c9ef2b0689bfc1057d21c4aeed087c329f
git.kernel.orghttps://git.kernel.org/stable/c/3bc6d0f8b70a9101456cf02ab99acb75254e1852
git.kernel.orghttps://git.kernel.org/stable/c/455a469758e57a6fe070e3e342db12e4a629e0eb
git.kernel.orghttps://git.kernel.org/stable/c/b5e900a3612b69423a0e1b0ab67841a1fb4af80f
git.kernel.orghttps://git.kernel.org/stable/c/4c5b123ab289767afe940389dbb963c5c05e594e
git.kernel.orghttps://git.kernel.org/stable/c/04f283fc16c8d5db641b6bffd2d8310aa7eccebc
git.kernel.orghttps://git.kernel.org/stable/c/e972b08b91ef48488bae9789f03cfedb148667fb
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

01 Record index

CVE-2024-50082

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-50082

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References