CVE-2024-50117

Summary

CVE-2024-50117 is a vulnerability in the Linux kernel that can result in a NULL pointer dereference. This issue occurs when the kernel receives bad data during an ATIF method call from the BIOS. If this occurs, a series of functions, including acpi_ut_update_object_reference and amdgpu_atif_query_backlight_caps, may be triggered, leading to a page fault and system crash. The vulnerability has been encountered on at least one system, so the Linux kernel has been updated to guard against this bad data and prevent the dereference from occurring.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.