CVE-2024-50026: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-50026 affects the Linux kernel's SCSI subsystem, specifically the wd33c93 driver. The vulnerability was introduced by commit dbb2da557a6a which moved the SCSI pointer to private command data, resulting in a regression that causes an oops in wd33c93_intr(). The issue affects Linux kernel versions from 5.18 up to (excluding) 6.1.113, 6.2 up to (excluding) 6.6.57, and 6.7 up to (excluding) 6.11.4 (NVD).

The vulnerability stems from using a stale scsipointer value during the selection phase. The regression occurs because the scsipointer variable is initialized from hostdata->connected, which is not yet valid during selection. The CVSS v3.1 base score is 5.5 (Medium) with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When exploited, this vulnerability can cause a system crash (oops) in the wd33c93_intr() function of the Linux kernel's SCSI subsystem (Kernel Patch).

The issue has been fixed by modifying the code to get the current scsi_pointer from hostdata->selecting instead of hostdata->connected. The fix has been incorporated into multiple Linux kernel versions through patches (Kernel Patch).