Linux kernel GSM race allows local privilege escalation (CVE-2024-50073)
Original title: ZDI-26-1000: Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation Vulnerability
Exploitation requires existing high-privileged code; ZDI assigned a CVSS rating of 7.5.
ZDI published ZDI-26-1000, a race condition in Linux kernel GSM multiplexing that can escalate privileges. Unlike typical local bugs, ZDI says the attacker must already execute high-privileged code. The assigned identifier is CVE-2024-50073, with a CVSS rating of 7.5. No patch version or exploitation status is given.
- The flaw is a race in kernel GSM multiplexing.
- ZDI advisory identifier is ZDI-26-1000.
- High-privileged code execution is a stated prerequisite.
- No affected or fixed kernel versions are stated.
Impact: local privilege escalation after high-privileged code execution
| Product | Affected |
|---|---|
| Linux Kernel | — |
- CVEs
- CVE-2024-50073
- Vendors
- Linux
- Products
- Linux Kernel
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50073 | Linux kernel: tty: n_gsm | 7.8 | <1% |
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.