NetSight
critical9.8

CVE-2024-26760

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d ("block: turn b…

Impact

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.19 before 6.1.80
from 6.2 before 6.6.19
from 6.7 before 6.7.7
Version 6.8

Weakness classification

References