CVE-2024-50223

Summary

CVE-2024-50223: A null pointer dereference vulnerability was discovered in the Linux kernel's scheduling subsystem, specifically in the task_numa_work() function. This issue was identified during the execution of the stress-ng-vm-segv test, which attempts to stress test the SIGSEGV error handling function. In this scenario, a null pointer was returned when the vma pointer was checked before being dereferenced in task_numa_work(), leading to a kernel crash. The vulnerability could potentially be exploited if an attacker manages to trigger the task_numa_work() function under specific conditions, allowing them to cause a denial of service or gain unauthorized access to the system. The issue has been resolved in the latest Linux kernel update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.