Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-42276

nvme-pci: add missing condition check for existence of mapped data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: add missing condition check for existence of mapped data nvme_map_data() is called when request has physical segments, hence the nvme_unmap_data() should have same condition to avoid dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < 3f8ec1d6b0ebd8268307d52be8301973fa5a01ecaffected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < be23ae63080e0bf9e246ab20207200bca6585ebaaffected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < 7cc1f4cd90a00b6191cb8cda2d1302fdce59361caffected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < d135c3352f7c947a922da93c8e763ee6bc208b64affected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < 77848b379e9f85a08048a2c8b3b4a7e8396f5f83affected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < 70100fe721840bf6d8e5abd25b8bffe4d2e049b7affected
  • 4aedb705437f6f98b45f45c394e6803ca67abd33 to < c31fad1470389666ac7169fe43aa65bf5b7e2cfdaffected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.4.282 to ≤ 5.4.*unaffected
  • 5.10.224 to ≤ 5.10.*unaffected
  • 5.15.165 to ≤ 5.15.*unaffected
  • 6.1.103 to ≤ 6.1.*unaffected
  • 6.6.44 to ≤ 6.6.*unaffected
  • 6.10.3 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References