CVE-2024-43913
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
nvme: apple: fix device reference counting
Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < f7d9a18572fcd7130459b7691bd19ee2a2e951ad | affected |
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3d | affected |
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < b9ecbfa45516182cd062fecd286db7907ba84210 | affected |
| Linux | Linux | 5.19 | affected |
| Linux | Linux | 0 < 5.19 | unaffected |
| Linux | Linux | 6.6.64 <= 6.6.* | unaffected |
| Linux | Linux | 6.10.5 <= 6.10.* | unaffected |
| Linux | Linux | 6.11 <= * | unaffected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://git.kernel.org/stable/c/f7d9a18572fcd7130459b7691bd19ee2a2e951ad
- https://git.kernel.org/stable/c/d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3d
- https://git.kernel.org/stable/c/b9ecbfa45516182cd062fecd286db7907ba84210
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.