CVE - CVE-2024-47666

CVE-ID
CVE-2024-47666	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Set phy->enable_completion only when we wait for it pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RESET / PHY_HARD_RESET, waits 300 ms, and returns. The problem arises when a phy control response comes late. After 300 ms the pm8001_phy_control() function returns and the passed enable_completion stack address is no longer valid. Late phy control response invokes complete() on a dangling enable_completion pointer which leads to a kernel crash.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/7b1d779647afaea9185fa2f150b1721e7c1aae89 URL:https://git.kernel.org/stable/c/7b1d779647afaea9185fa2f150b1721e7c1aae89 MISC:https://git.kernel.org/stable/c/e4f949ef1516c0d74745ee54a0f4882c1f6c7aea URL:https://git.kernel.org/stable/c/e4f949ef1516c0d74745ee54a0f4882c1f6c7aea MISC:https://git.kernel.org/stable/c/f14d3e1aa613311c744af32d75125e95fc8ffb84 URL:https://git.kernel.org/stable/c/f14d3e1aa613311c744af32d75125e95fc8ffb84
Assigning CNA
kernel.org
Date Record Created
20240930	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240930)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)