CVE-2024-50021

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins() This patch addresses a reference count handling issue in the ice_dpll_init_rclk_pins() function. The function calls ice_dpll_get_pins(), which increments the reference count of the relevant resources. However, if the condition WARN_ON((!vsi || !vsi->netdev)) is met, the function currently returns an error without properly releasing the resources acquired by ice_dpll_get_pins(), leading to a reference count leak. To resolve this, the check has been moved to the top of the function. This ensures that the function verifies the state before any resources are acquired, avoiding the need for additional resource management in the error path. This bug was identified by an experimental static analysis tool developed by our team. The tool specializes in analyzing reference count operations and detecting potential issues where resources are not properly managed. In this case, the tool flagged the missing release operation as a potential problem, which led to the development of this patch.

• https://git.kernel.org/stable/c/aefecead9d08f4a35ab6f51ba2e408d2cef4e31dPatch
• https://git.kernel.org/stable/c/ccca30a18e36a742e606d5bf0630e75be7711d0aPatch

Published

Oct 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-50016Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-50017In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50018Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-50019In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5002The User Submitted Posts WordPress plugin before 20240516 d…4.8
• CVE-2024-50020In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50022In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50023In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50024In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50025In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50026In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-50027In the Linux kernel, the following vulnerability has been re…5.5