CVE-2024-50026 scsi: wd33c93: Don't use stale scsi_pointer value
A regression in the wd33c93 SCSI driver causes a kernel oops due to using a stale pointer during device selection, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50026?
CVE-2024-50026 is a medium-severity vulnerability in Linux kernel, published on 21 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: wd33c93: Don't use stale scsi_pointer value
A regression was introduced with commit dbb2da557a6a ("scsi: wd33c93: Move the SCSI pointer to private command data") which results in an oops in wd33c93_intr(). That commit added the scsi_pointer variable and initialized it from hostdata->connected. However, during selection, hostdata->connected is not yet valid. Fix this by getting the current scsi_pointer from hostdata->selecting.
Which versions are affected by CVE-2024-50026?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50026?
Apply the vendor's patch.
Is CVE-2024-50026 being exploited?
There is no known exploitation of CVE-2024-50026 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-51557, BELL-CVE-2024-50026, DEBIAN-CVE-2024-50026, GHSA-hw89-rwr4-65g5, UBUNTU-CVE-2024-50026.