CVE-2024-50173

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue concerns an access to an uninitialized variable in the tick ctx cleanup() function. Specifically, the group variable cannot be used to retrieve ptdev in the second loop because it points to the previously iterated list head, not a valid group. Instead, the ptdev object should be retrieved from the scheduler.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.