CVE-2024-49967 - Vulnerability Details

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Published: 2024-10-21

Score: 7.1 High

EPSS: n/a

KEV: No

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-570.12.1.el9_6	cpe:/a:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z
kernel-0:5.14.0-570.12.1.el9_6	cpe:/o:redhat:enterprise_linux:9	RHSA-2025:6966	2025-05-13T00:00:00Z

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4008-1	linux-6.1 security update
Ubuntu USN	USN-7166-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7166-2	Linux kernel (AWS) vulnerabilities
Ubuntu USN	USN-7166-3	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-7167-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-2	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-7170-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-7173-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7173-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7166-4	Linux kernel (Xilinx ZynqMP) vulnerabilities
Ubuntu USN	USN-7167-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-3	Linux kernel vulnerabilities
Ubuntu USN	USN-7169-4	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7169-5	Linux kernel (Real-time) vulnerabilities
Ubuntu USN	USN-7173-3	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-7183-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7184-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7185-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7185-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7186-1	Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN	USN-7186-2	Linux kernel vulnerabilities
Ubuntu USN	USN-7194-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7195-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7195-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7196-1	Linux kernel (Azure) vulnerabilities

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2024102133-CVE-2024-49967-a58a@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-49967
https://www.cve.org/CVERecord?id=CVE-2024-49967

History

Wed, 14 May 2025 04:30:00 +0200

Type	Values Removed	Values Added
First Time appeared		Redhat Redhat enterprise Linux
CPEs		cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux

Thu, 13 Feb 2025 01:45:00 +0100

Type	Values Removed	Values Added
Weaknesses		CWE-99
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H'}`

Tue, 07 Jan 2025 10:30:00 +0100

Type	Values Removed	Values Added
Weaknesses	NVD-CWE-noinfo
CPEs	cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products	Linux Linux linux Kernel
References	https://git.kernel.org/stable/c/133ff0d78f1b160de011647bb65807195ca5d1ca https://git.kernel.org/stable/c/1a00a393d6a7fb1e745a41edd09019bd6a0ad64c https://git.kernel.org/stable/c/2d64e7dada22ab589d1ac216a3661074d027f25e https://git.kernel.org/stable/c/64c8c484242b141998f7408596ddb2dc6da4b1d3 https://git.kernel.org/stable/c/9d4b2e4c36bb88d57018c1cbc8b6a0c4b44a7f42 https://git.kernel.org/stable/c/a02d7f5b24193aed451ac67aad3453472e79dc78 https://git.kernel.org/stable/c/aca593e6070e21979430c344e9cb0b272a9e7e10 https://git.kernel.org/stable/c/cdfd6ef391df332c9abb854f4530dd7bfbd71dc4 https://git.kernel.org/stable/c/fe192515d2937b8ed2d21921b558a06dd2031d21
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Tue, 07 Jan 2025 10:15:00 +0100

Type	Values Removed	Values Added
Title	ext4: no need to continue when the number of entries is 1	kernel: ext4: no need to continue when the number of entries is 1
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 07 Jan 2025 10:00:00 +0100

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the number of entries is 1	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Fri, 08 Nov 2024 17:00:00 +0100

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/64c8c484242b141998f7408596ddb2dc6da4b1d3 https://git.kernel.org/stable/c/cdfd6ef391df332c9abb854f4530dd7bfbd71dc4

Fri, 01 Nov 2024 16:30:00 +0100

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
Metrics	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Wed, 23 Oct 2024 03:30:00 +0200

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2024102133-CVE-2024-49967-a58a@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2024-49967 https://www.cve.org/CVERecord?id=CVE-2024-49967
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Tue, 22 Oct 2024 16:15:00 +0200

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 21 Oct 2024 20:15:00 +0200

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ext4: no need to continue when the number of entries is 1
Title		ext4: no need to continue when the number of entries is 1
References		https://git.kernel.org/stable/c/133ff0d78f1b160de011647bb65807195ca5d1ca https://git.kernel.org/stable/c/1a00a393d6a7fb1e745a41edd09019bd6a0ad64c https://git.kernel.org/stable/c/2d64e7dada22ab589d1ac216a3661074d027f25e https://git.kernel.org/stable/c/9d4b2e4c36bb88d57018c1cbc8b6a0c4b44a7f42 https://git.kernel.org/stable/c/a02d7f5b24193aed451ac67aad3453472e79dc78 https://git.kernel.org/stable/c/aca593e6070e21979430c344e9cb0b272a9e7e10 https://git.kernel.org/stable/c/fe192515d2937b8ed2d21921b558a06dd2031d21

Subscriptions

Redhat Enterprise Linux

MITRE

Status: REJECTED

Assigner: Linux

Published: 2024-10-21T18:02:17.714Z

Updated: 2025-01-07T08:46:31.368Z

Reserved: 2024-10-21T12:17:06.050Z

Link: CVE-2024-49967

Vulnrichment

Updated:

NVD

Status : Rejected

Published: 2024-10-21T18:15:17.767

Modified: 2026-10-16T13:10:00.173

Link: CVE-2024-49967

Redhat

Severity : Moderate

Publid Date: 2024-10-21T00:00:00Z

Links: CVE-2024-49967 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

CWE-99
Improper Control of Resource Identifiers ('Resource Injection')

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object