High 7.8Published Nov 5, 2024

CVE-2024-50127net: sched: fix use-after-free in taprio_change()

Updated under an hour ago (Oct 27, 2026, 11:20 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix use-after-free in taprio_change() In 'taprio_change()', 'admin' pointer may become dangling due to sched switch / removal caused by 'advance_sched()', and critical section protected by 'q->current_entry_lock' is too small to prevent from such a scenario (which causes use-after-free detected by KASAN). Fix this by prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update 'admin' immediately before an attempt to schedule freeing.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-416
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 2f868ce6013548a713c431c679ef73747a66fcf3; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 8a283a19026aaae8a773fd8061263cfa315b127f; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 999612996df28d81f163dad530d7f8026e03aec6; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before fe371f084073e8672a2d7d46b335c3c060d1e301; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 0d4c0d2844e4eac3aed647f948fd7e60eea56a61; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before 2240f9376f20f8b6463232b4ca7292569217237f; from a3d43c0d56f1b94e74963a2fbadfb70126d92213 before f504465970aebb2467da548f7c1efbbf36d0f44b	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.2 before 5.15.170; from 5.16 before 6.1.115; from 6.2 before 6.6.59; from 6.7 before 6.11.6; 6.12; 6.12; 6.12; 6.12	NVD

References

References

https://git.kernel.org/stable/c/2f868ce6013548a713c431c679ef73747a66fcf3	patch
https://git.kernel.org/stable/c/8a283a19026aaae8a773fd8061263cfa315b127f	patch
https://git.kernel.org/stable/c/999612996df28d81f163dad530d7f8026e03aec6	patch
https://git.kernel.org/stable/c/fe371f084073e8672a2d7d46b335c3c060d1e301	patch
https://git.kernel.org/stable/c/0d4c0d2844e4eac3aed647f948fd7e60eea56a61	patch
https://git.kernel.org/stable/c/2240f9376f20f8b6463232b4ca7292569217237f	patch
https://git.kernel.org/stable/c/f504465970aebb2467da548f7c1efbbf36d0f44b	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.