BLOG
At a glance
- CVE-2024-50073 is a race condition in the Linux Kernel n_gsm driver.
- Local exploitation may lead to privilege escalation and code execution in the kernel context.
- An attacker must be able to execute highly privileged code on the target system.
- Identify the kernel branch and update according to the applicable Linux fix.
Linux Kernel: n_gsm race condition may enable local privilege escalation
Zero Day Initiative published an advisory for CVE-2024-50073, a race condition in the Linux Kernel n_gsm driver. An attacker needs local access to execute highly privileged code; successful exploitation may enable privilege escalation and code execution in the kernel context. Identify the kernel…
In this article
Zero Day Initiative published an advisory for vulnerability CVE-2024-50073 in the Linux Kernel. This article summarizes the stated exploitation requirements, impact, and response guidance from the Zero Day Initiative advisory.
Overview and technical details
The Linux Kernel is the core of the Linux operating system, managing system resources and providing essential services to software. The vulnerability is in the n_gsm driver and is identified as CVE-2024-50073.
| Field | Details |
|---|---|
| Product | Linux Kernel, n_gsm driver |
| CVE | CVE-2024-50073 |
| CVSS | 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) |
| Source | Zero Day Initiative |
Affected systems
The advisory identifies the n_gsm driver in the Linux Kernel as the affected component, but the source record does not provide affected or fixed version ranges. Administrators should identify the kernel branch in use and compare it with the applicable update guidance before deployment.
Mechanism and impact
The issue results from a lack of appropriate locking when operating on an object. An attacker must be able to execute highly privileged code on the target system; successful exploitation may lead to privilege escalation and code execution in the kernel context.
System checks
Identify the running kernel version so it can be compared with the appropriate update.
uname -rThis command checks the version; it does not fix the vulnerability.
Remediation and mitigation
Prioritize updating the Linux Kernel with a fix released by Linux. Identify the kernel branch in use and compare it with the applicable update guidance before deployment; the source record does not specify a fixed version.
The related fix is referenced in Linux commit 9462f4ca56e7d2430fdb6dcc8498244acbfc4489.
References
Related articles
Ubuntu Linux kernel for NVIDIA Tegra: check systems and apply security updates
Ubuntu USN-9091-1 warns of multiple vulnerabilities in the Linux kernel for NVIDIA Tegra. The supplied record gives no affected branches or fixed packages. Check installed kernels and packages, then consult the Ubuntu notice for the applicable update.
Linux Kernel: SCTP race condition allows privilege escalation
Zero Day Initiative disclosed CVE-2026-98130, a race condition in the Linux Kernel SCTP subsystem. A local low-privileged user may escalate privileges and execute code in kernel context. Prioritize installing the Linux fix; the record does not specify affected or fixed versions.
Linux Kernel: CVE-2026-98797 allows local users to escalate privileges
Zero Day Initiative reports CVE-2026-98797 in Linux Kernel Net Scheduler Qdisc. Improper input validation can cause an out-of-bounds write, potentially enabling privilege escalation and code execution in the kernel context. Check the running kernel and prioritize the Linux fix.
Linux Kernel ksmbd out-of-bounds read could expose sensitive information
Zero Day Initiative disclosed CVE-2026-64138 in Linux Kernel ksmbd: an out-of-bounds read could expose sensitive information. Only systems with ksmbd enabled are affected; prioritize updating the kernel through the Linux vendor.