CVE-2024-50109

Summary

CVE-2024-50109 is a vulnerability affecting the Linux kernel. In the md/raid10 module, a null pointer dereference issue was identified. If raid10_set_queue_limits() succeeds but following procedures fail, raid10_run() will return zero while mddev->private remains null, resulting in a null pointer dereference in raid10_size(). This issue has been addressed by only overwriting the return value in raid10_run() if raid10_set_queue_limits() fails.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.