CVE-2024-50119

Summary

CVE-2024-50119 is a vulnerability affecting the Linux kernel that involves a mismanagement of the 'cifs_io_request_pool'. The issue arises when the 'cifs_io_request_pool' is not created using mempool_create(), yet it is being destroyed using mempool_destroy(). This mismatch in initialization leads to a warning message during kernel execution. To mitigate the issue, instead of freeing the 'cifs_io_request_pool' using mempool_destroy(), the correct approach is to use mempool_exit() to revert it properly. This vulnerability can potentially lead to unintended consequences, making it essential to address it promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.