nvmet-tcp: fix kernel crash if commands allocation fails

CVE-2024-46737
Currently unrated 🤨

Key Information

Vendor
Linux
Status
Linux
Vendor
CVE Published:
18 September 2024

Summary

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL pointer dereference. nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Fix the bug by setting queue->nr_cmds to zero in case nvmet_tcp_alloc_cmd() fails.

Affected Version(s)

Linux < 03e1fd0327fa

Linux < 50632b877ce5

Linux < 91dad30c5607

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.