CVE-2024-49863 is a null pointer dereference vulnerability in the Linux kernel's vhost/scsi subsystem. It occurs in the function vhost_scsi_get_req() when handling certain SCSI AN requests from a guest. The bug leads to a null pointer dereference that causes the vhost_worker process to crash while holding a mutex, resulting in indefinite occupation of the corresponding target portal group (tpg). This vulnerability has a medium severity with an impact on availability but no confidentiality or integrity loss. No affected versions or patch information are explicitly provided in the input data.