7.8

CVE-2024-50051: linux Use After Free

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2024-50051DEBIAN-CVE-2024-50051
Published 11-01-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-50051 is a high (CVSS 7.8) Use After Free vulnerability in linux. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 16.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.26%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 55 · Related 53
DLA-4076-1MGASA-2025-0030MGASA-2025-0032SUSE-SU-2025:0289-1SUSE-SU-2025:0428-1SUSE-SU-2025:0499-1

Timeline

  1. 11-01-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module remove If we remove the module which will call mpc52xx_spi_remove it will free 'ms' through spi_unregister_controller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug. Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xx_spi_remove.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.26%

Chance of exploitation in the next 30 days

Percentile

16%

Versus all other CVEs

30-day change

+0.03 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu135 products
  • linuxAll versions (No fix recorded) | < 4.4.0-272.306 | < 4.15.0-241.253 | < 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1147.153 | < 4.4.0-1185.200 | < 4.15.0-1184.197 | < 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < d0cde3911cf24e1bcdd4caa1d1b9ef57589db5a1 | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < e0c6ce8424095c2da32a063d3fc027494c689817 | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < cd5106c77d6d6828aa82449f01f4eb436d602a21 | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < 373d55a47dc662e5e30d12ad5d334312f757c1f1 | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59 | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < 90b72189de2cddacb26250579da0510b29a8b82b | ≥ ca632f556697d45d67ed5cada7cedf3ddfe0db4b, < 984836621aad98802d92c4a3047114cf518074c8 | 3.1
  • linux_kernel≥ 3.1, < 5.4.287 | ≥ 5.5, < 5.10.231 | ≥ 5.11, < 5.15.174 | ≥ 5.16, < 6.1.120 | ≥ 6.2, < 6.6.66 | ≥ 6.7, < 6.12.5 | 6.13:rc1
Debian1 product
  • linux< 6.1.123-1 | < 6.12.5-1

3 vendors · 138 products

References

54 links
Show all 54 references