Memory Leak Vulnerability in Linux Kernel Affecting SCSI QEDI Driver

CVE-2024-56747

Summary

A memory leak vulnerability exists in the Linux kernel specifically impacting the SCSI QEDI driver, due to improper handling in the qedi_alloc_and_init_sb() function. When the initialization process fails, it does not release the DMA memory allocated for sb_virt, which may lead to resource exhaustion over time. The fix involves implementing dma_free_coherent() to correctly free memory, following the existing practices observed in similar allocation functions like qedr_alloc_mem_sb() and qede_alloc_mem_sb(). Addressing this issue is crucial for maintaining optimal system performance and stability.

References