scsi: target: core: Fix null-ptr-deref in target_alloc_device()
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix null-ptr-deref in target_alloc_device() There is a null-ptr-deref issue reported by KASAN: BUG: KASAN: null-ptr-deref in target_alloc_device+0xbc4/0xbe0 [target_core_mod] ... kasan_report+0xb9/0xf0 target_alloc_device+0xbc4/0xbe0 [target_core_mod] core_dev_setup_virtual_lun0+0xef/0x1f0 [target_core_mod] target_core_init_configfs+0x205/0x420 [target_core_mod] do_one_initcall+0xdd/0x4e0 ... entry_SYSCALL_64_after_hwframe+0x76/0x7e In target_alloc_device(), if allocing memory for dev queues fails, then dev will be freed by dev->transport->free_device(), but dev->transport is not initialized at that time, which will lead to a null pointer reference problem. Fixing this bug by freeing dev with hba->backend->ops->free_device().
CVE-2024-50153
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-50153
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "008b936bbde3e87a611b3828a0d5d2a4f99026a0",
"lessThan": "8c1e6717f60d31f8af3937c23c4f1498529584e1",
"versionType": "git"
},
{
"status": "affected",
"version": "1526d9f10c6184031e42afad0adbdde1213e8ad1",
"lessThan": "39e02fa90323243187c91bb3e8f2f5f6a9aacfc7",
"versionType": "git"
},
{
"status": "affected",
"version": "1526d9f10c6184031e42afad0adbdde1213e8ad1",
"lessThan": "895ab729425ef9bf3b6d2f8d0853abe64896f314",
"versionType": "git"
},
{
"status": "affected",
"version": "1526d9f10c6184031e42afad0adbdde1213e8ad1",
"lessThan": "b80e9bc85bd9af378e7eac83e15dd129557bbdb6",
"versionType": "git"
},
{
"status": "affected",
"version": "1526d9f10c6184031e42afad0adbdde1213e8ad1",
"lessThan": "14a6a2adb440e4ae97bee73b2360946bd033dadd",
"versionType": "git"
},
{
"status": "affected",
"version": "1526d9f10c6184031e42afad0adbdde1213e8ad1",
"lessThan": "fca6caeb4a61d240f031914413fcc69534f6dc03",
"versionType": "git"
},
{
"status": "affected",
"version": "5.10.180",
"lessThan": "5.10.229",
"versionType": "semver"
}
],
"programFiles": [
"drivers/target/target_core_device.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.11"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.11",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.229",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.170",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.115",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.59",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.11.6",
"versionType": "semver",
"lessThanOrEqual": "6.11.*"
},
{
"status": "unaffected",
"version": "6.12",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/target/target_core_device.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-50153
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26792 · Revision 1
- Added to Heist Feed
- Publisher date