CVE-2024-50277

Summary

CVE-2024-50277 is a recently identified vulnerability affecting the Linux kernel. When the function blk_alloc_disk fails, a subsequent attempt is made by the cleanup_mapped_device function to access the md->disk variable, which has been set to an error value. This results in a crash when the line "md->disk->private_data = NULL;" is executed. The Linux community has released a patch to resolve this issue and prevent potential crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.