Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Linux Linux)

CVE-2024-26930
HIGH 7.0

En bref

Source
NVD
EPSS
EPSS 0.23 % · centile 14 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Rechercher sur…

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map pointer Coverity scan reported potential risk of double free of the pointer ha->vp_map. ha->vp_map was freed in qla2x00_mem_alloc(), and again freed in function qla2x00_mem_free(ha). Assign NULL to vp_map and kfree take care of NULL.

Faiblesses (CWE)

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.0CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < f14cee7a882cb79528f17a2335f53e9fd1848467 ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < b7deb675d674f44e0ddbab87fee8f9f098925e73 ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < 825d63164a2e6bacb059a9afb5605425b485413f ; affected 430eef03a763e5e76a371ba6d02779ae4a64b6ea < e288285d47784fdcf7c81be56df7d65c6f10c58b
Linux · Linuxaffected 6.3 ; unaffected 0 < 6.3 ; unaffected 6.6.24 ≤ 6.6.* ; unaffected 6.7.12 ≤ 6.7.* ; unaffected 6.8.3 ≤ 6.8.* ; unaffected 6.9 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD