CVE-2024-56747

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

Low · published December 29, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

Hook "qedi_ops->common->sb_init = qed_sb_init" does not release the DMA

memory sb_virt when it fails. Add dma_free_coherent() to free it. This

is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Published
2024-12-29T11:30Z
EPSS history
Timeline
  • 29 DEC 11:30Z
    scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
    cvelistv5