CVE-2024-49860

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58

Description: A vulnerability in the Linux kernel has been identified where the description show() function accesses invalid memory if the return type of the STR method is not a buffer object. Only buffer objects are valid return values of STR.

Recommendations: For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the STR method to minimize the risk of exploitation.