CVE-2024-42250 is a medium severity vulnerability in the Linux kernel's cachefiles subsystem. It involves missing lock protection during polling when iterating over an xarray data structure. The absence of a necessary spinlock means that the poll routine may dereference data structures without adequate synchronization, potentially leading to a use-after-free or data corruption. The vulnerability has been resolved by adding the missing lock protection.