CVE-2024-50228

Summary

CVE-2024-50228 is a Linux kernel vulnerability affecting the shmem subsystem. A data race was discovered in the shmem_getattr() function, specifically in the use of generic_fillattr(). This data race can lead to unexpected behavior when read-locks are not held, as reported by the Kernel Concurrency Sanitizer during syzbot testing. The issue arises from the lack of special protection when calling generic_fillattr() from shmem_getattr(). To mitigate this vulnerability, it is recommended to protect the inode using inode_lock_shared() and inode_unlock_shared() when calling generic_fillattr() from shmem_getattr().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.