cve-2024-50013
Vulnerability from cvelistv5
Published
2024-10-21 18:54
Modified
2024-12-19 09:31
Severity ?
EPSS score ?
0.02% (0.03844)
Summary
In the Linux kernel, the following vulnerability has been resolved: exfat: fix memory leak in exfat_load_bitmap() If the first directory entry in the root directory is not a bitmap directory entry, 'bh' will not be released and reassigned, which will cause a memory leak.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4e1813e52f86eb8db0c6c9570251f2fcbc571f5dPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/89081e8407e637463db5880d168e3652fb9f4330Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf0b3b35259475d1fe377bcaa565488e26684f7aPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d2b537b3e533f28e0d97293fe9293161fe8cd137Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dca359db1eb37f334267ebd7e3cab9a66d191d5bPatch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63Patch
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f692160d3e1e5450605071b8df8f7d08d9b09a83Patch
Impacted products
Vendor Product Version
Linux Linux Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
Version: 1e49a94cf707204b66a3fb242f2814712c941f52
 Create a notification for this product.
   Linux Linux Version: 5.7
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-50013",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-22T13:28:23.211214Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-22T13:28:48.436Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "Linux",
               programFiles: [
                  "fs/exfat/balloc.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     lessThan: "f692160d3e1e5450605071b8df8f7d08d9b09a83",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "4e1813e52f86eb8db0c6c9570251f2fcbc571f5d",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "bf0b3b35259475d1fe377bcaa565488e26684f7a",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "dca359db1eb37f334267ebd7e3cab9a66d191d5b",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "89081e8407e637463db5880d168e3652fb9f4330",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
                  {
                     lessThan: "d2b537b3e533f28e0d97293fe9293161fe8cd137",
                     status: "affected",
                     version: "1e49a94cf707204b66a3fb242f2814712c941f52",
                     versionType: "git",
                  },
               ],
            },
            {
               defaultStatus: "affected",
               product: "Linux",
               programFiles: [
                  "fs/exfat/balloc.c",
               ],
               repo: "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               vendor: "Linux",
               versions: [
                  {
                     status: "affected",
                     version: "5.7",
                  },
                  {
                     lessThan: "5.7",
                     status: "unaffected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.10.*",
                     status: "unaffected",
                     version: "5.10.227",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "5.15.*",
                     status: "unaffected",
                     version: "5.15.168",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.1.*",
                     status: "unaffected",
                     version: "6.1.113",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.6.*",
                     status: "unaffected",
                     version: "6.6.55",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.10.*",
                     status: "unaffected",
                     version: "6.10.14",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "6.11.*",
                     status: "unaffected",
                     version: "6.11.3",
                     versionType: "semver",
                  },
                  {
                     lessThanOrEqual: "*",
                     status: "unaffected",
                     version: "6.12",
                     versionType: "original_commit_for_fix",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix memory leak in exfat_load_bitmap()\n\nIf the first directory entry in the root directory is not a bitmap\ndirectory entry, 'bh' will not be released and reassigned, which\nwill cause a memory leak.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T09:31:17.449Z",
            orgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            shortName: "Linux",
         },
         references: [
            {
               url: "https://git.kernel.org/stable/c/f692160d3e1e5450605071b8df8f7d08d9b09a83",
            },
            {
               url: "https://git.kernel.org/stable/c/ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63",
            },
            {
               url: "https://git.kernel.org/stable/c/4e1813e52f86eb8db0c6c9570251f2fcbc571f5d",
            },
            {
               url: "https://git.kernel.org/stable/c/bf0b3b35259475d1fe377bcaa565488e26684f7a",
            },
            {
               url: "https://git.kernel.org/stable/c/dca359db1eb37f334267ebd7e3cab9a66d191d5b",
            },
            {
               url: "https://git.kernel.org/stable/c/89081e8407e637463db5880d168e3652fb9f4330",
            },
            {
               url: "https://git.kernel.org/stable/c/d2b537b3e533f28e0d97293fe9293161fe8cd137",
            },
         ],
         title: "exfat: fix memory leak in exfat_load_bitmap()",
         x_generator: {
            engine: "bippy-5f407fcff5a0",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      assignerShortName: "Linux",
      cveId: "CVE-2024-50013",
      datePublished: "2024-10-21T18:54:05.089Z",
      dateReserved: "2024-10-21T12:17:06.061Z",
      dateUpdated: "2024-12-19T09:31:17.449Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-50013\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T19:15:04.767\",\"lastModified\":\"2024-10-25T19:49:36.863\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nexfat: fix memory leak in exfat_load_bitmap()\\n\\nIf the first directory entry in the root directory is not a bitmap\\ndirectory entry, 'bh' will not be released and reassigned, which\\nwill cause a memory leak.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: exfat: corrige pérdida de memoria en exfat_load_bitmap() Si la primera entrada de directorio en el directorio raíz no es una entrada de directorio de mapa de bits, 'bh' no se liberará ni se reasignará, lo que provocará una pérdida de memoria.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-401\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.7\",\"versionEndExcluding\":\"5.10.227\",\"matchCriteriaId\":\"E992DF81-0B1D-4EEA-8F9E-DCB1FE218301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.168\",\"matchCriteriaId\":\"4D51C05D-455B-4D8D-89E7-A58E140B864C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.113\",\"matchCriteriaId\":\"D01BD22E-ACD1-4618-9D01-6116570BE1EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.55\",\"matchCriteriaId\":\"E90B9576-56C4-47BC-AAB0-C5B2D438F5D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.14\",\"matchCriteriaId\":\"4C16BCE0-FFA0-4599-BE0A-1FD65101C021\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.11\",\"versionEndExcluding\":\"6.11.3\",\"matchCriteriaId\":\"54D9C704-D679-41A7-9C40-10A6B1E7FFE9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/4e1813e52f86eb8db0c6c9570251f2fcbc571f5d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89081e8407e637463db5880d168e3652fb9f4330\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/bf0b3b35259475d1fe377bcaa565488e26684f7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d2b537b3e533f28e0d97293fe9293161fe8cd137\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dca359db1eb37f334267ebd7e3cab9a66d191d5b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f692160d3e1e5450605071b8df8f7d08d9b09a83\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-50013\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:28:23.211214Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:28:26.292Z\"}}], \"cna\": {\"title\": \"exfat: fix memory leak in exfat_load_bitmap()\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"f692160d3e1e5450605071b8df8f7d08d9b09a83\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"4e1813e52f86eb8db0c6c9570251f2fcbc571f5d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"bf0b3b35259475d1fe377bcaa565488e26684f7a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"dca359db1eb37f334267ebd7e3cab9a66d191d5b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"89081e8407e637463db5880d168e3652fb9f4330\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e49a94cf707204b66a3fb242f2814712c941f52\", \"lessThan\": \"d2b537b3e533f28e0d97293fe9293161fe8cd137\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/exfat/balloc.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.7\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.7\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.227\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.168\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.55\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.14\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/exfat/balloc.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f692160d3e1e5450605071b8df8f7d08d9b09a83\"}, {\"url\": \"https://git.kernel.org/stable/c/ddf704c2ce3b73f38d2dd8cf1bb0f7ec038bdf63\"}, {\"url\": \"https://git.kernel.org/stable/c/4e1813e52f86eb8db0c6c9570251f2fcbc571f5d\"}, {\"url\": \"https://git.kernel.org/stable/c/bf0b3b35259475d1fe377bcaa565488e26684f7a\"}, {\"url\": \"https://git.kernel.org/stable/c/dca359db1eb37f334267ebd7e3cab9a66d191d5b\"}, {\"url\": \"https://git.kernel.org/stable/c/89081e8407e637463db5880d168e3652fb9f4330\"}, {\"url\": \"https://git.kernel.org/stable/c/d2b537b3e533f28e0d97293fe9293161fe8cd137\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nexfat: fix memory leak in exfat_load_bitmap()\\n\\nIf the first directory entry in the root directory is not a bitmap\\ndirectory entry, 'bh' will not be released and reassigned, which\\nwill cause a memory leak.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T09:31:17.449Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-50013\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T09:31:17.449Z\", \"dateReserved\": \"2024-10-21T12:17:06.061Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T18:54:05.089Z\", \"assignerShortName\": \"Linux\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.