CVE-2024-56748
scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() Hook "qed_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.11
References 8
git.kernel.org
- stable/c/97384449ddfc07f12ca75f510eb070020d7abb34
- stable/c/a56777a3ef5b35e24a20c4418bcf88bad033807a
- stable/c/64654bf5efb3f748e6fc41227adda689618ce9c4
- stable/c/b514f45e0fe18d763a1afc34401b1585333cb329
- stable/c/7c1832287b21ff68c4e3625e63cc7619edf5908b
- stable/c/0e04bd5a11dffe8c1c0e4c9fc79f7d3cd6182dd5
- stable/c/78a169dc69fbdaf114c40e2d56955bf6bd4fc3c0
- stable/c/c62c30429db3eb4ced35c7fcf6f04a61ce3a01bb