CVE-2024-56756

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56756
In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but __nvme_alloc_host_mem could break out of the loop earlier on memory allocation failure and end up using less descriptors than planned for, which leads to an incorrect size passed to dma_free_coherent. In practice this was not showing up because the number of descriptors tends to be low and the dma coherent allocator always allocates and frees at least a page.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3c2fb1ca8086eb139b2a551358137525ae8e0d7a Patch
https://git.kernel.org/stable/c/452f9ddd12bebc04cef741e8ba3806bf0e1fd015 Patch
https://git.kernel.org/stable/c/582d9ed999b004fb1d415ecbfa86d4d8df455269 Patch
https://git.kernel.org/stable/c/6d0f599db73b099aa724a12736369c4d4d92849d Patch
https://git.kernel.org/stable/c/869cf50b9c9d1059f5223f79ef68fc0bc6210095 Patch
https://git.kernel.org/stable/c/ac22240540e0c5230d8c4138e3778420b712716a Patch
https://git.kernel.org/stable/c/cee3bff51a35cab1c5d842d409a7b11caefe2386 Patch
https://git.kernel.org/stable/c/fb96d5cfa97a7363245b3dd523f475b04296d87b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Jan 2025, 20:33

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nvme-pci: se corrige la liberación de la tabla de descriptores HMB La tabla de descriptores HMB tiene un tamaño que coincide con el número máximo de descriptores que se pueden usar para un dispositivo determinado, pero __nvme_alloc_host_mem podría salir del bucle antes en caso de fallo en la asignación de memoria y terminar usando menos descriptores de lo planeado, lo que lleva a que se pase un tamaño incorrecto a dma_free_coherent. En la práctica, esto no se mostraba porque el número de descriptores tiende a ser bajo y el asignador coherente dma siempre asigna y libera al menos una página.
References () https://git.kernel.org/stable/c/3c2fb1ca8086eb139b2a551358137525ae8e0d7a - () https://git.kernel.org/stable/c/3c2fb1ca8086eb139b2a551358137525ae8e0d7a - Patch
References () https://git.kernel.org/stable/c/452f9ddd12bebc04cef741e8ba3806bf0e1fd015 - () https://git.kernel.org/stable/c/452f9ddd12bebc04cef741e8ba3806bf0e1fd015 - Patch
References () https://git.kernel.org/stable/c/582d9ed999b004fb1d415ecbfa86d4d8df455269 - () https://git.kernel.org/stable/c/582d9ed999b004fb1d415ecbfa86d4d8df455269 - Patch
References () https://git.kernel.org/stable/c/6d0f599db73b099aa724a12736369c4d4d92849d - () https://git.kernel.org/stable/c/6d0f599db73b099aa724a12736369c4d4d92849d - Patch
References () https://git.kernel.org/stable/c/869cf50b9c9d1059f5223f79ef68fc0bc6210095 - () https://git.kernel.org/stable/c/869cf50b9c9d1059f5223f79ef68fc0bc6210095 - Patch
References () https://git.kernel.org/stable/c/ac22240540e0c5230d8c4138e3778420b712716a - () https://git.kernel.org/stable/c/ac22240540e0c5230d8c4138e3778420b712716a - Patch
References () https://git.kernel.org/stable/c/cee3bff51a35cab1c5d842d409a7b11caefe2386 - () https://git.kernel.org/stable/c/cee3bff51a35cab1c5d842d409a7b11caefe2386 - Patch
References () https://git.kernel.org/stable/c/fb96d5cfa97a7363245b3dd523f475b04296d87b - () https://git.kernel.org/stable/c/fb96d5cfa97a7363245b3dd523f475b04296d87b - Patch
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

29 Dec 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-29 12:15

Updated : 2025-01-06 20:33

NVD link : CVE-2024-56756

Mitre link : CVE-2024-56756

CVE.ORG link : CVE-2024-56756

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other