Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-46843

scsi: ufs: core: Remove SCSI host only if added

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove SCSI host only if added If host tries to remove ufshcd driver from a UFS device it would cause a kernel panic if ufshcd_async_scan fails during ufshcd_probe_hba before adding a SCSI host with scsi_add_host and MCQ is enabled since SCSI host has been defered after MCQ configuration introduced by commit 0cab4023ec7b ("scsi: ufs: core: Defer adding host to SCSI if MCQ is supported"). To guarantee that SCSI host is removed only if it has been added, set the scsi_host_added flag to true after adding a SCSI host and check whether it is set or not before removing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to < 2f49e05d6b58d660f035a75ff96b77071b4bd5edaffected
  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to < 3844586e9bd9845140e1078f1e61896b576ac536affected
  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to < 7cbff570dbe8907e23bba06f6414899a0fbb2fccaffected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.51 to ≤ 6.6.*unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References