CVE-2024-41098 is a vulnerability in the Linux kernel's libata-core subsystem where a null pointer dereference occurs if ata_port_alloc() fails during ata_host_alloc(). This leads to ata_host_release() being called, which unconditionally frees ata_port struct members, causing a kernel crash (page fault). The issue has been fixed by correcting the error handling to avoid accessing null pointers.