Threats tagged 'ghsa-grq5-97jg-xjfp'

CVE-2024-50265 is a vulnerability in the Linux kernel's ocfs2 filesystem code where a null pointer dereference occurs due to double removal of an entry in the ocfs2_xa_remove() function. This flaw causes a kernel crash (denial of service) when certain extended attribute operations are performed. The issue arises from incorrect error handling that leads to the same entry being removed twice. The vulnerability has been fixed by ensuring the entry is removed only once.