CVE-2024-50026

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: wd33c93: Don't use stale scsi_pointer value

A regression was introduced with commit dbb2da557a6a ("scsi: wd33c93: Move the SCSI pointer to private command data") which results in an oops in wd33c93_intr(). That commit added the scsi_pointer variable and initialized it from hostdata->connected. However, during selection, hostdata->connected is not yet valid. Fix this by getting the current scsi_pointer from hostdata->selecting.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxdbb2da557a6a87c88bbb4b1fef037091b57f701b < 3afeceda855dea9b85cddd96307d4d17c8742005affected
LinuxLinuxdbb2da557a6a87c88bbb4b1fef037091b57f701b < e04642a207f1d2ae28a08624c04c67f5681f3451affected
LinuxLinuxdbb2da557a6a87c88bbb4b1fef037091b57f701b < b60ff1a95c7c386cdd6153de3d7d85edaeabd800affected
LinuxLinuxdbb2da557a6a87c88bbb4b1fef037091b57f701b < 9023ed8d91eb1fcc93e64dc4962f7412b1c4cbecaffected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.1.113 <= 6.1.*unaffected
LinuxLinux6.6.57 <= 6.6.*unaffected
LinuxLinux6.11.4 <= 6.11.*unaffected
LinuxLinux6.12 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References