CVE-2024-50005

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-50005
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50005.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-50005
Downstream
Related
Published
2024-10-21T18:53:59.259Z
Modified
2025-11-20T06:52:58.941063Z
Summary
mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
Details

In the Linux kernel, the following vulnerability has been resolved:

mac802154: Fix potential RCU dereference issue in mac802154scanworker

In the mac802154_scan_worker function, the scan_req->type field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules, this is illegal and can lead to unpredictable behavior, such as accessing memory that has been updated or causing use-after-free issues.

This possible bug was identified using a static analysis tool developed by myself, specifically designed to detect RCU-related issues.

To address this, the scan_req->type value is now stored in a local variable scan_req_type while still within the RCU read-side critical section. The scan_req_type is then used after the RCU lock is released, ensuring that the type value is safely accessed without violating RCU rules.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8
Fixed
e676e4ea76bbe7f1156d8c326b9b6753849481c2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8
Fixed
540138377b22f601f06f55ebfa3ca171dcab471a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8
Fixed
d18f669461811dfe2915d5554ab2a9834f810013
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2c3e6f53a7a8a00ffeed127cfd1b397c3b016f8
Fixed
bff1709b3980bd7f80be6786f64cc9a9ee9e56da

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.10.1
v6.10.10
v6.10.11
v6.10.12
v6.10.13
v6.10.2
v6.10.3
v6.10.4
v6.10.5
v6.10.6
v6.10.7
v6.10.8
v6.10.9
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.3
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "164544274298415939706044394412796376436",
                "163636870083219671083001081924498265532",
                "190247593320491023354860123506861797776",
                "65308973465977054294461136372790328090",
                "180415073045847703231896620121133858663",
                "334129386490923180492388472844841209126",
                "12302756342919431442015634783628689578",
                "88515392105581322039894492863214073874",
                "311898039237901976923301602934858083489",
                "113466797217557589296180737087287539469",
                "12706558751134042315348530839352327121",
                "10639403606088766027112987554381656327"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@540138377b22f601f06f55ebfa3ca171dcab471a",
        "target": {
            "file": "net/mac802154/scan.c"
        },
        "id": "CVE-2024-50005-0514377c"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "164544274298415939706044394412796376436",
                "163636870083219671083001081924498265532",
                "190247593320491023354860123506861797776",
                "65308973465977054294461136372790328090",
                "180415073045847703231896620121133858663",
                "334129386490923180492388472844841209126",
                "12302756342919431442015634783628689578",
                "88515392105581322039894492863214073874",
                "311898039237901976923301602934858083489",
                "113466797217557589296180737087287539469",
                "12706558751134042315348530839352327121",
                "10639403606088766027112987554381656327"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e676e4ea76bbe7f1156d8c326b9b6753849481c2",
        "target": {
            "file": "net/mac802154/scan.c"
        },
        "id": "CVE-2024-50005-22fb36a9"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "164544274298415939706044394412796376436",
                "163636870083219671083001081924498265532",
                "190247593320491023354860123506861797776",
                "65308973465977054294461136372790328090",
                "180415073045847703231896620121133858663",
                "334129386490923180492388472844841209126",
                "12302756342919431442015634783628689578",
                "88515392105581322039894492863214073874",
                "311898039237901976923301602934858083489",
                "113466797217557589296180737087287539469",
                "12706558751134042315348530839352327121",
                "10639403606088766027112987554381656327"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff1709b3980bd7f80be6786f64cc9a9ee9e56da",
        "target": {
            "file": "net/mac802154/scan.c"
        },
        "id": "CVE-2024-50005-2d61fac3"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1872.0,
            "function_hash": "229270790283549608188276190773097928144"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@540138377b22f601f06f55ebfa3ca171dcab471a",
        "target": {
            "file": "net/mac802154/scan.c",
            "function": "mac802154_scan_worker"
        },
        "id": "CVE-2024-50005-6348c844"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1872.0,
            "function_hash": "229270790283549608188276190773097928144"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d18f669461811dfe2915d5554ab2a9834f810013",
        "target": {
            "file": "net/mac802154/scan.c",
            "function": "mac802154_scan_worker"
        },
        "id": "CVE-2024-50005-8a8a5100"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1872.0,
            "function_hash": "229270790283549608188276190773097928144"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e676e4ea76bbe7f1156d8c326b9b6753849481c2",
        "target": {
            "file": "net/mac802154/scan.c",
            "function": "mac802154_scan_worker"
        },
        "id": "CVE-2024-50005-94e08716"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1872.0,
            "function_hash": "229270790283549608188276190773097928144"
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bff1709b3980bd7f80be6786f64cc9a9ee9e56da",
        "target": {
            "file": "net/mac802154/scan.c",
            "function": "mac802154_scan_worker"
        },
        "id": "CVE-2024-50005-dbd3ce72"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "164544274298415939706044394412796376436",
                "163636870083219671083001081924498265532",
                "190247593320491023354860123506861797776",
                "65308973465977054294461136372790328090",
                "180415073045847703231896620121133858663",
                "334129386490923180492388472844841209126",
                "12302756342919431442015634783628689578",
                "88515392105581322039894492863214073874",
                "311898039237901976923301602934858083489",
                "113466797217557589296180737087287539469",
                "12706558751134042315348530839352327121",
                "10639403606088766027112987554381656327"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d18f669461811dfe2915d5554ab2a9834f810013",
        "target": {
            "file": "net/mac802154/scan.c"
        },
        "id": "CVE-2024-50005-e9eb6a86"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.55
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.14
Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.11.3