CVE-2024-50020

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count() This patch addresses an issue with improper reference count handling in the ice_sriov_set_msix_vec_count() function. First, the function calls ice_get_vf_by_id(), which increments the reference count of the vf pointer. If the subsequent call to ice_get_vf_vsi() fails, the function currently returns an error without decrementing the reference count of the vf pointer, leading to a reference count leak. The correct behavior, as implemented in this patch, is to decrement the reference count using ice_put_vf(vf) before returning an error when vsi is NULL. Second, the function calls ice_sriov_get_irqs(), which sets vf->first_vector_idx. If this call returns a negative value, indicating an error, the function returns an error without decrementing the reference count of the vf pointer, resulting in another reference count leak. The patch addresses this by adding a call to ice_put_vf(vf) before returning an error when vf->first_vector_idx < 0. This bug was identified by an experimental static analysis tool developed by our team. The tool specializes in analyzing reference count operations and identifying potential mismanagement of reference counts. In this case, the tool flagged the missing decrement operation as a potential issue, leading to this patch.

• https://git.kernel.org/stable/c/416dbb815ca69684de148328990ba0ec53e6dbc1Patch
• https://git.kernel.org/stable/c/d517cf89874c6039e6294b18d66f40988e62502aPatch

Published

Oct 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50015In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50016Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-50017In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50018Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-50019In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5002The User Submitted Posts WordPress plugin before 20240516 d…4.8
• CVE-2024-50021In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50022In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50023In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50024In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50025In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50026In the Linux kernel, the following vulnerability has been re…5.5