{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2024-50210", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-10-21T19:36:19.970Z", "datePublished": "2024-11-08T06:08:00.319Z", "dateUpdated": "2026-05-12T12:00:28.952Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T20:47:33.314Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()\n\nIf get_clock_desc() succeeds, it calls fget() for the clockid's fd,\nand get the clk->rwsem read lock, so the error path should release\nthe lock to make the lock balance and fput the clockid's fd to make\nthe refcount balance and release the fd related resource.\n\nHowever the below commit left the error path locked behind resulting in\nunbalanced locking. Check timespec64_valid_strict() before\nget_clock_desc() to fix it, because the \"ts\" is not changed\nafter that.\n\n[pabeni@redhat.com: fixed commit message typo]" } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "kernel/time/posix-clock.c" ], "versions": [ { "version": "29f085345cde24566efb751f39e5d367c381c584", "lessThan": "d005400262ddaf1ca1666bbcd1acf42fe81d57ce", "status": "affected", "versionType": "git" }, { "version": "e0c966bd3e31911b57ef76cec4c5796ebd88e512", "lessThan": "a8219446b95a859488feaade674d13f9efacfa32", "status": "affected", "versionType": "git" }, { "version": "673a1c5a2998acbd429d6286e6cad10f17f4f073", "lessThan": "c7fcfdba35abc9f39b83080c2bce398dad13a943", "status": "affected", "versionType": "git" }, { "version": "c8789fbe2bbf75845e45302cba6ffa44e1884d01", "lessThan": "e56e0ec1b79f5a6272c6e78b36e9d593aa0449af", "status": "affected", "versionType": "git" }, { "version": "27abbde44b6e71ee3891de13e1a228aa7ce95bfe", "lessThan": "5f063bbf1ee6b01611c016b54e050a41506eb794", "status": "affected", "versionType": "git" }, { "version": "a3f169e398215e71361774d13bf91a0101283ac2", "lessThan": "1ba33b327c3f88a7baee598979d73ab5b44d41cc", "status": "affected", "versionType": "git" }, { "version": "1ff7247101af723731ea42ed565d54fb8f341264", "lessThan": "b27330128eca25179637c1816d5a72d6cc408c66", "status": "affected", "versionType": "git" }, { "version": "d8794ac20a299b647ba9958f6d657051fc51a540", "lessThan": "6e62807c7fbb3c758d233018caf94dfea9c65dbd", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "kernel/time/posix-clock.c" ], "versions": [ { "version": "5.10.228", "lessThan": "5.10.229", "status": "affected", "versionType": "semver" }, { "version": "5.15.169", "lessThan": "5.15.170", "status": "affected", "versionType": "semver" }, { "version": "6.1.114", "lessThan": "6.1.115", "status": "affected", "versionType": "semver" }, { "version": "6.6.58", "lessThan": "6.6.59", "status": "affected", "versionType": "semver" }, { "version": "6.11.5", "lessThan": "6.11.6", "status": "affected", "versionType": "semver" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.228", "versionEndExcluding": "5.10.229" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.169", "versionEndExcluding": "5.15.170" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.114", "versionEndExcluding": "6.1.115" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.58", "versionEndExcluding": "6.6.59" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11.5", "versionEndExcluding": "6.11.6" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/d005400262ddaf1ca1666bbcd1acf42fe81d57ce" }, { "url": "https://git.kernel.org/stable/c/a8219446b95a859488feaade674d13f9efacfa32" }, { "url": "https://git.kernel.org/stable/c/c7fcfdba35abc9f39b83080c2bce398dad13a943" }, { "url": "https://git.kernel.org/stable/c/e56e0ec1b79f5a6272c6e78b36e9d593aa0449af" }, { "url": "https://git.kernel.org/stable/c/5f063bbf1ee6b01611c016b54e050a41506eb794" }, { "url": "https://git.kernel.org/stable/c/1ba33b327c3f88a7baee598979d73ab5b44d41cc" }, { "url": "https://git.kernel.org/stable/c/b27330128eca25179637c1816d5a72d6cc408c66" }, { "url": "https://git.kernel.org/stable/c/6e62807c7fbb3c758d233018caf94dfea9c65dbd" } ], "title": "posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()", "x_generator": { "engine": "bippy-1.2.0" } }, "adp": [ { "metrics": [ { "cvssV3_1": { "scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE" } }, { "other": { "type": "ssvc", "content": { "id": "CVE-2024-50210", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "version": "2.0.3", "timestamp": "2025-10-01T20:17:22.253155Z" } } } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "type": "CWE", "cweId": "CWE-667", "description": "CWE-667 Improper Locking" } ] } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-01T20:27:06.056Z" } }, { "title": "CVE Program Container", "references": [ { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" } ], "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T22:27:05.200Z" } }, { "x_adpType": "supplier", "providerMetadata": { "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-05-12T12:00:28.952Z" }, "affected": [ { "vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ] } ] } }