CVE-2024-50026: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-50026 affects the Linux kernel's SCSI subsystem, specifically the wd33c93 driver. The vulnerability was introduced by commit dbb2da557a6a which moved the SCSI pointer to private command data, resulting in a regression that causes an oops in wd33c93_intr(). The issue affects Linux kernel versions from 5.18 up to (excluding) 6.1.113, 6.2 up to (excluding) 6.6.57, and 6.7 up to (excluding) 6.11.4 (NVD).

The vulnerability stems from using a stale scsi_pointer value during the selection phase. The regression occurs because the scsi_pointer variable is initialized from hostdata->connected, which is not yet valid during selection. The CVSS v3.1 base score is 5.5 (Medium) with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can cause a system crash (oops) in the wd33c93_intr() function of the Linux kernel's SCSI subsystem (Kernel Patch).

The vulnerability requires local access with low privileges to exploit. No known exploits in the wild have been reported (NVD).

The issue has been fixed by modifying the code to get the current scsi_pointer from hostdata->selecting instead of hostdata->connected. The fix has been incorporated into multiple Linux kernel versions through patches (Kernel Patch).