CVE-2024-50109

A flaw was found in the Linux kernel's md/raid10 component. A local attacker could trigger a null pointer dereference in the raid10_size() function. This occurs when an internal function returns zero, but a critical data structure remains uninitialized, leading to a system crash. This vulnerability can result in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, if RAID10 functionality is not actively used on the system, the raid10 kernel module can be prevented from loading. Create a modprobe configuration file to blacklist the module: echo "install raid10 /bin/true" > /etc/modprobe.d/disable-raid10.conf A system reboot is required for this change to take effect. Disabling the raid10 module will prevent the system from utilizing any RAID10 arrays, which may impact system functionality if RAID10 is in use.