{"id":"CVE-2024-50210","revision":"25b629aeb83f4eb29189667ed9e48eee","records":[{"revision":"25b629aeb83f4eb29189667ed9e48eee","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-50210","aliases":[],"title":"posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nposix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()\n\nIf get_clock_desc() succeeds, it calls fget() for the clockid's fd,\nand get the clk->rwsem read lock, so the error path should release\nthe lock to make the lock balance and fput the clockid's fd to make\nthe refcount balance and release the fd related resource.\n\nHowever the below commit left the error path locked behind resulting in\nunbalanced locking. Check timespec64_valid_strict() before\nget_clock_desc() to fix it, because the \"ts\" is not changed\nafter that.\n\n[pabeni@redhat.com: fixed commit message typo]","state":0,"publishedAt":"2024-11-08T06:08:00.319+00:00","modifiedAt":"2026-10-15T00:57:28.03+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/time/posix-clock.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"29f085345cde24566efb751f39e5d367c381c584\",\n                            \"lessThan\": \"d005400262ddaf1ca1666bbcd1acf42fe81d57ce\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e0c966bd3e31911b57ef76cec4c5796ebd88e512\",\n                            \"lessThan\": \"a8219446b95a859488feaade674d13f9efacfa32\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"673a1c5a2998acbd429d6286e6cad10f17f4f073\",\n                            \"lessThan\": \"c7fcfdba35abc9f39b83080c2bce398dad13a943\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c8789fbe2bbf75845e45302cba6ffa44e1884d01\",\n                            \"lessThan\": \"e56e0ec1b79f5a6272c6e78b36e9d593aa0449af\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"27abbde44b6e71ee3891de13e1a228aa7ce95bfe\",\n                            \"lessThan\": \"5f063bbf1ee6b01611c016b54e050a41506eb794\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a3f169e398215e71361774d13bf91a0101283ac2\",\n                            \"lessThan\": \"1ba33b327c3f88a7baee598979d73ab5b44d41cc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1ff7247101af723731ea42ed565d54fb8f341264\",\n                            \"lessThan\": \"b27330128eca25179637c1816d5a72d6cc408c66\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d8794ac20a299b647ba9958f6d657051fc51a540\",\n                            \"lessThan\": \"6e62807c7fbb3c758d233018caf94dfea9c65dbd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"kernel/time/posix-clock.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.10.228\",\n                            \"lessThan\": \"5.10.229\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.169\",\n                            \"lessThan\": \"5.15.170\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.114\",\n                            \"lessThan\": \"6.1.115\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.58\",\n                            \"lessThan\": \"6.6.59\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11.5\",\n                            \"lessThan\": \"6.11.6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/d005400262ddaf1ca1666bbcd1acf42fe81d57ce","https://git.kernel.org/stable/c/a8219446b95a859488feaade674d13f9efacfa32","https://git.kernel.org/stable/c/c7fcfdba35abc9f39b83080c2bce398dad13a943","https://git.kernel.org/stable/c/e56e0ec1b79f5a6272c6e78b36e9d593aa0449af","https://git.kernel.org/stable/c/5f063bbf1ee6b01611c016b54e050a41506eb794","https://git.kernel.org/stable/c/1ba33b327c3f88a7baee598979d73ab5b44d41cc","https://git.kernel.org/stable/c/b27330128eca25179637c1816d5a72d6cc408c66","https://git.kernel.org/stable/c/6e62807c7fbb3c758d233018caf94dfea9c65dbd"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-50210","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-50210","identifiers":["CVE-2024-50210"]},"retained":false,"historicalAffected":[]}],"coverage":[]}