CVE-2024-46673

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46673
In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4b540ec7c0045c2d01c4e479f34bbc8f147afa4c Patch
https://git.kernel.org/stable/c/564e1986b00c5f05d75342f8407f75f0a17b94df Patch
https://git.kernel.org/stable/c/60962c3d8e18e5d8dfa16df788974dd7f35bd87a Patch
https://git.kernel.org/stable/c/85449b28ff6a89c4513115e43ddcad949b5890c9 Patch
https://git.kernel.org/stable/c/8a3995a3ffeca280a961b59f5c99843d81b15929 Patch
https://git.kernel.org/stable/c/919ddf8336f0b84c0453bac583808c9f165a85c2 Patch
https://git.kernel.org/stable/c/9e96dea7eff6f2bbcd0b42a098012fc66af9eb69 Patch
https://git.kernel.org/stable/c/d237c7d06ffddcdb5d36948c527dc01284388218 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
History

13 Sep 2024, 16:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
First Time Linux linux Kernel
Linux
CWE CWE-415
References () https://git.kernel.org/stable/c/4b540ec7c0045c2d01c4e479f34bbc8f147afa4c - () https://git.kernel.org/stable/c/4b540ec7c0045c2d01c4e479f34bbc8f147afa4c - Patch
References () https://git.kernel.org/stable/c/564e1986b00c5f05d75342f8407f75f0a17b94df - () https://git.kernel.org/stable/c/564e1986b00c5f05d75342f8407f75f0a17b94df - Patch
References () https://git.kernel.org/stable/c/60962c3d8e18e5d8dfa16df788974dd7f35bd87a - () https://git.kernel.org/stable/c/60962c3d8e18e5d8dfa16df788974dd7f35bd87a - Patch
References () https://git.kernel.org/stable/c/85449b28ff6a89c4513115e43ddcad949b5890c9 - () https://git.kernel.org/stable/c/85449b28ff6a89c4513115e43ddcad949b5890c9 - Patch
References () https://git.kernel.org/stable/c/8a3995a3ffeca280a961b59f5c99843d81b15929 - () https://git.kernel.org/stable/c/8a3995a3ffeca280a961b59f5c99843d81b15929 - Patch
References () https://git.kernel.org/stable/c/919ddf8336f0b84c0453bac583808c9f165a85c2 - () https://git.kernel.org/stable/c/919ddf8336f0b84c0453bac583808c9f165a85c2 - Patch
References () https://git.kernel.org/stable/c/9e96dea7eff6f2bbcd0b42a098012fc66af9eb69 - () https://git.kernel.org/stable/c/9e96dea7eff6f2bbcd0b42a098012fc66af9eb69 - Patch
References () https://git.kernel.org/stable/c/d237c7d06ffddcdb5d36948c527dc01284388218 - () https://git.kernel.org/stable/c/d237c7d06ffddcdb5d36948c527dc01284388218 - Patch

13 Sep 2024, 14:06

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: scsi: aacraid: Fix double-free on probe failure aac_probe_one() llama a funciones init específicas del hardware a través del puntero aac_driver_ident::init, todas las cuales eventualmente invocan a aac_init_adapter(). Si aac_init_adapter() falla después de asignar memoria para aac_dev::queues, libera la memoria pero no borra ese miembro. Después de que la función init específica del hardware devuelve un error, aac_probe_one() recorre una ruta de error que libera la memoria a la que apunta aac_dev::queues, lo que da como resultado una doble liberación.

13 Sep 2024, 06:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-13 06:15

Updated : 2024-09-13 16:51

NVD link : CVE-2024-46673

Mitre link : CVE-2024-46673

CVE.ORG link : CVE-2024-46673

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free