CVE-2024-50227

Summary

CVE-2024-50227 is a Linux kernel vulnerability that affected the thunderbolt driver. The issue was caused by a stack out-of-bounds read in the function tb_retimer_scan(). A KASAN report indicated that the read size was 4 bytes, and the data was being read from the address 0xfff88810111fc1c by the task kworker/u56:0/11. The root cause was a loop variable that was not properly initialized, causing the array to be read past its bounds. The vulnerability has been resolved by assigning the correct value to the loop variable directly in the loop body.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.