# CVE-2024-50043: linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When... CVE-2024-50043 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2024-50043, released October 21, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2024-50043 - Priority: High - CVSS: 7.8 (high) - EPSS: 0.0049 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 21, 2024 ## Description In the Linux kernel, the following vulnerability has been resolved: nfsd: fix possible badness in FREE_STATEID When multiple FREE_STATEIDs are sent for the same delegation stateid, it can lead to a possible either use-after-free or counter refcount underflow errors. In nfsd4_free_stateid() under the client lock we find a delegation stateid, however the code drops the lock before calling nfs4_put_stid(), that allows another FREE_STATE to find the stateid again. The first one will proceed to then free the stateid which leads to either use-after-free or decrementing already zeroed counter. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | bpftool ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-container ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-container ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-core ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-core ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-devel ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-devel ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-doc ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-doc ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-modules ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-modules ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-core ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-core ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-devel ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-devel ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-modules ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-modules ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-modules-extra ol 8 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | kernel-uek64k-modules-extra ol 9 | 0:5.15.0-320.202.8.2.el9uek | [ELSA-2026-50261](https://patchblox.com/security/data/fix/linux/elsa-2026-50261.md) | May 10, 2026 | | Linux | linux Debian 13.5 (trixie) | 6.11.4-1 | [DEBIAN-CVE-2024-50043](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50043.md) | Oct 21, 2024 | | Linux | linux Debian 14 | 6.11.4-1 | [DEBIAN-CVE-2024-50043](https://patchblox.com/security/data/fix/linux/debian-cve-2024-50043.md) | Oct 21, 2024 | --- Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.