CVE-2024-49886 is a medium severity vulnerability in the Linux kernel's platform/x86 ISST component. It involves a slab-out-of-bounds bug detected by KASAN when attaching an SST PCI device to a virtual machine, causing kernel crashes. The issue is a memory out-of-bounds read in the isst_if_get_pci_dev function. This flaw impacts system stability but does not affect confidentiality or integrity.