Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After-Free condition. This issue is resolved by initializing vsk->trans to NULL.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
@attritionorg @ptswarm CVE-2024-50264 was a hard-to-exploit race condition in the Linux kernel, which received the Pwnie Award 2025 as the Best Privilege Escalation. The bug collision story is described in the article.
Post summary
CVE-2024-50264 is a race condition in the Linux kernel labeled as hard-to-exploit and awarded a Pwnie Award; no PoC, exploit code, patch, or evidence of active exploitation is mentioned.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |
| OS | linux | linux_kernel | 6.12 | - | - |