CVE-2024-50301

Q: What is the severity of CVE-2024-50301?

CVE-2024-50301 has a CVSS score of 7.1 (HIGH). This is a Linux kernel vulnerability in the key management subsystem that allows an attacker with local access to cause a slab-out-of-bounds read, potentially leading to information disclosure or system instability. It affects Linux systems using the kernel's keyring functionality, particularly when specific key patterns are created.

7.1 HIGH

Denial of Service

📋 TL;DR

This is a Linux kernel vulnerability in the key management subsystem that allows an attacker with local access to cause a slab-out-of-bounds read, potentially leading to information disclosure or system instability. It affects Linux systems using the kernel's keyring functionality, particularly when specific key patterns are created.

💻 Affected Systems

Products:

Linux kernel

Versions: Linux kernel versions up to and including 5.10.0-14930 (specific affected versions may vary by distribution)

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires keyring functionality to be enabled (default in most Linux distributions). Exploitation requires ability to create specific key patterns.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel memory corruption leading to privilege escalation, denial of service, or information disclosure of sensitive kernel memory contents.

🟠

Likely Case

System crash or kernel panic due to invalid memory access, potentially causing denial of service.

🟢

If Mitigated

Limited impact if proper access controls prevent unauthorized users from creating keys or if the system is patched.

🌐 Internet-Facing: LOW - Requires local access to exploit, not directly exploitable over network.

🏢 Internal Only: MEDIUM - Local attackers or malicious users could exploit this to crash systems or potentially escalate privileges.

🎯 Exploit Status

Public PoC: ⚠️ Yes

Weaponized: LIKELY

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Reproduction steps are documented in the CVE description and require creating specific key patterns. Syzbot has reported this issue.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patched in kernel commits from git.kernel.org stable branches (e.g., 199c20fb7499c79557a075dc24e9a7dae7d9f1ce)

Vendor Advisory: https://git.kernel.org/stable/c/199c20fb7499c79557a075dc24e9a7dae7d9f1ce

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. For custom kernels, apply the fix from kernel.org stable branches. 3. Reboot system to load new kernel.

🔧 Temporary Workarounds

Restrict key creation

linux

Limit ability to create keys to trusted users only

# Use SELinux/AppArmor to restrict keyctl permissions
# Review and restrict users with CAP_SYS_ADMIN

Disable keyring functionality

linux

Remove or disable keyring subsystem (may break applications)

# Not recommended for production - may break authentication systems

🧯 If You Can't Patch

Implement strict access controls to prevent unauthorized users from creating keys
Monitor for unusual key creation patterns and system crashes

🔍 How to Verify

Check if Vulnerable:

Check kernel version: uname -r and compare with patched versions from your distribution

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version after update and check that key_task_permission function no longer has the vulnerable code path

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
KASAN reports of slab-out-of-bounds in key_task_permission
System crashes after key creation

Network Indicators:

None - local exploit only

SIEM Query:

Search for: 'KASAN: slab-out-of-bounds' AND 'key_task_permission' in kernel logs

📊 Metadata

CVE ID: CVE-2024-50301

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE: CWE-125

Published: November 19, 2024

Last Updated: November 3, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Restrict key creation

Disable keyring functionality

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities