CVE - CVE-2024-46737

CVE-ID
CVE-2024-46737	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL pointer dereference. nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Fix the bug by setting queue->nr_cmds to zero in case nvmet_tcp_alloc_cmd() fails.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/03e1fd0327fa5e2174567f5fe9290fe21d21b8f4 URL:https://git.kernel.org/stable/c/03e1fd0327fa5e2174567f5fe9290fe21d21b8f4 MISC:https://git.kernel.org/stable/c/489f2913a63f528cfe3f21722583fb981967ecda URL:https://git.kernel.org/stable/c/489f2913a63f528cfe3f21722583fb981967ecda MISC:https://git.kernel.org/stable/c/50632b877ce55356f5d276b9add289b1e7ddc683 URL:https://git.kernel.org/stable/c/50632b877ce55356f5d276b9add289b1e7ddc683 MISC:https://git.kernel.org/stable/c/5572a55a6f830ee3f3a994b6b962a5c327d28cb3 URL:https://git.kernel.org/stable/c/5572a55a6f830ee3f3a994b6b962a5c327d28cb3 MISC:https://git.kernel.org/stable/c/6c04d1e3ab22cc5394ef656429638a5947f87244 URL:https://git.kernel.org/stable/c/6c04d1e3ab22cc5394ef656429638a5947f87244 MISC:https://git.kernel.org/stable/c/7957c731fc2b23312f8935812dee5a0b14b04e2d URL:https://git.kernel.org/stable/c/7957c731fc2b23312f8935812dee5a0b14b04e2d MISC:https://git.kernel.org/stable/c/91dad30c5607e62864f888e735d0965567827bdf URL:https://git.kernel.org/stable/c/91dad30c5607e62864f888e735d0965567827bdf
Assigning CNA
kernel.org
Date Record Created
20240911	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240911)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)