Tracker / CVE-2024-46737
CVE-2024-46737
High 7.5
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL pointer dereference. nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Fix the bug by setting queue->nr_cmds to zero in case nvmet_tcp_alloc_cmd() fails.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 5.0 → 5.4.284 |
| linux | linux_kernel · 5.11 → 5.15.167 |
| linux | linux_kernel · 5.16 → 6.1.110 |
| linux | linux_kernel · 5.5 → 5.10.226 |
| linux | linux_kernel · 6.2 → 6.6.51 |
| linux | linux_kernel · 6.7 → 6.10.10 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.