CVE-2024-50153

A flaw was found in the Linux kernel's SCSI target core. When memory allocation for device queues fails within the target_alloc_device() function, the system attempts to free an uninitialized device transport structure. This can lead to a null pointer dereference, allowing a local attacker with low privileges to cause a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the target_core_mod kernel module from loading. This can be achieved by creating a modprobe configuration file:

echo "blacklist target_core_mod" > /etc/modprobe.d/blacklist-target_core_mod.conf

A system reboot is required for this change to take effect. Disabling this module may impact systems that utilize SCSI target functionality.