CVE-2024-50303

Summary

CVE-2024-50303: In the Linux kernel, a vulnerability affecting resource management during kexec has been addressed. The function walk_system_ram_res_rev erroneously discards resource flags when passing information to callbacks, potentially causing systems with IORESOURCE_SYSRAM_DRIVER_MANAGED memory to select these resources for storing kexec buffers above normal system ram. This can result in undefined behavior, including crashes or system instability. The issue was discovered in a system with CXL memory expanders, TPM enabled, and CONFIG_IMA_KEXEC=y. The vulnerability allows an attacker to potentially gain control over the system by manipulating the kexec buffer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.