CVE-2024-50094

Summary

CVE-2024-50094 is a vulnerability in the Linux kernel affecting the sfc driver. The issue stems from the netpoll function, which invokes the driver's NAPI function with a zero budget. In the context of netpoll, the driver unconditionally calls xdp_do_flush(), leading to a crash due to an unassigned bpf_net_context. To mitigate this vulnerability, xdp_do_flush() should only be invoked when the budget is not zero.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.