Threats tagged 'ghsa-cxw3-2f59-5p7f'

CVE-2024-50002 is a medium-severity vulnerability in the Linux kernel's static_call subsystem. It occurs when module initialization fails and static_call_del_module() improperly dereferences a pointer without verifying its type, potentially causing a general protection fault (#GP). The flaw arises because the code assumes a pointer is always of a certain type (static_call_mod) when it may actually be a different type (static_call_site) due to a union used for memory optimization. This can lead to kernel crashes during module cleanup after a failed initialization.