CVE-2024-50264

Incident Report for Strada

Postmortem

09:11 CET - Receiving CVE Alert

09:50 CET - Starting nodes migration

11:35 CET - Checking all nodes

12:46 CET - Issue closed

Posted Jan 28, 2025 - 12:04 UTC

Resolved

An update has been applied on all servers.

Posted Jan 28, 2025 - 12:00 UTC

Update

We are continuing to work on a fix for this issue.

Posted Jan 28, 2025 - 08:46 UTC

Identified

A vulnerability (CVE-2024-50264) has been discovered in the Linux kernel that can lead to privilege escalation on Container-Optimized OS and Ubuntu nodes

Posted Jan 28, 2025 - 08:44 UTC

This incident affected: Stradaworld (Time, Tracking, Website).