CVE-2024-50128

CVE-2024-50128 is a global out-of-bounds read vulnerability in the Linux kernel's WWAN networking driver, affecting Linux kernel versions. This flaw occurs when parsing Netlink attributes due to an incorrectly sized policy variable, leading to memory access errors. Rated with a CVSS score of 7.1 (High), this vulnerability has a local attack vector and low attack complexity, allowing an authenticated local attacker to achieve high confidentiality and availability impacts. The primary impact is information disclosure and potential system instability or denial of service. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage.