01 Record

CVE-2024-50131

tracing: Consider the NULL character when validating the event length

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

View raw JSON

02 Description

tracing: Consider the NULL character when validating the event length

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 16.1% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-08-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-11-05 17:10Z1 YR AGO

Last updated

2026-08-05 11:41Z1 MO AGO

Reserved

2024-10-21

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Weaknesses

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base

Data version

5.2

Document digest

31887fdac1714e0fcbc073ad778059332c0697018dcbf35ac050fcaa68a77ba9

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxdec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 5e3231b352725ff4a3a0095e6035af674f2d8725, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 02874ca52df2ca2423ba6122039315ed61c25972, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < b86b0d6eea204116e4185acc35041ca4ff11a642, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < f4ed40d1c669bba1a54407d8182acdc405683f29, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < a14a075a14af8d622c576145455702591bdde09d, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 5fd942598ddeed9a212d1ff41f9f5b47bcc990a7, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to < 0b6e2e22cb23105fcb171ab92f0f7516c69c8471, 5.1—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5e3231b352725ff4a3a0095e6035af674f2d8725
git.kernel.orghttps://git.kernel.org/stable/c/02874ca52df2ca2423ba6122039315ed61c25972
git.kernel.orghttps://git.kernel.org/stable/c/b86b0d6eea204116e4185acc35041ca4ff11a642
git.kernel.orghttps://git.kernel.org/stable/c/f4ed40d1c669bba1a54407d8182acdc405683f29
git.kernel.orghttps://git.kernel.org/stable/c/a14a075a14af8d622c576145455702591bdde09d
git.kernel.orghttps://git.kernel.org/stable/c/5fd942598ddeed9a212d1ff41f9f5b47bcc990a7
git.kernel.orghttps://git.kernel.org/stable/c/0b6e2e22cb23105fcb171ab92f0f7516c69c8471
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

01 Record index

CVE-2024-50131

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-50131

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References