CVE-2024-50002

CVE-2024-50002 is a vulnerability in the Linux kernel related to incorrect handling of module initialization failures within the static_call mechanism. Specifically, the static_call_del_module() function can cause a General Protection Fault (#GP) by incorrectly dereferencing a pointer when a module fails to initialize, due to an assumption about the pointer's type. This affects Linux kernel versions. The vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low attack complexity, requiring low privileges, and resulting in high availability impact (denial of service). There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.