CVE-2024-50263

Summary

CVE-2024-50263 is a vulnerability affecting the Linux kernel that has been addressed. The issue lies in the 'fork' function, where the khugepaged and ksm hooks are invoked unnecessarily during an incomplete memory management (mm) state. These hooks, which are meant to optimize memory performance, don't provide critical functionality, making it insignificant if they fail under extreme memory pressure. The changes made in commit d24062914837 have increased the relevance of this issue, and as a result, ksm_fork() has been made a void function. The mm is only exposed to these functions once they are done with it and no error occurred during the fork operation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.