NetSight
IP …
high7.8

CVE-2024-42276

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is calle…

Impact

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is called when request has physical segments, hence the nvme_unmap_data() should have same condition to avoid dereference.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.2 before 5.4.282
from 5.5 before 5.10.224
from 5.11 before 5.15.165
from 5.16 before 6.1.103
from 6.2 before 6.6.44
from 6.7 before 6.10.3

References