CVE-2024-49863 | Linux Kernel up to 6.11.2 scsi vhost_scsi_get_req null pointer dereference

A vulnerability has been found in Linux Kernel up to 6.11.2 and classified as critical. This vulnerability affects the function vhost_scsi_get_req of the component scsi. The manipulation leads to null pointer dereference.

This vulnerability was named CVE-2024-49863. Access to the local network is required for this attack. There is no exploit available.

It is recommended to upgrade the affected component.