Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-26760

scsi: target: pscsi: Fix bio_put() for error case

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 066ff571011d8416e903d3d4f1f41e0b5eb91e1d to < f49b20fd0134da84a6bd8108f9e73c077b7d6231affected
  • 066ff571011d8416e903d3d4f1f41e0b5eb91e1d to < 4ebc079f0c7dcda1270843ab0f38ab4edb8f7921affected
  • 066ff571011d8416e903d3d4f1f41e0b5eb91e1d to < 1cfe9489fb563e9a0c9cdc5ca68257a44428c2ecaffected
  • 066ff571011d8416e903d3d4f1f41e0b5eb91e1d to < de959094eb2197636f7c803af0943cb9d3b35804affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.80 to ≤ 6.1.*unaffected
  • 6.6.19 to ≤ 6.6.*unaffected
  • 6.7.7 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References