NetSight
IP …
high7.5

CVE-2024-46737

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails i…

Impact

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL pointer dereference. nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Fix the bug by setting queue->nr_cmds to zero in case nvmet_tcp_alloc_cmd() fails.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.0 before 5.4.284
from 5.5 before 5.10.226
from 5.11 before 5.15.167
from 5.16 before 6.1.110
from 6.2 before 6.6.51
from 6.7 before 6.10.10

Weakness classification

CWE-476

References