In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on th…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on the namespaces may exist after tearing down the controller. Ensure the admin request_queue is active by moving the controller's 'put' to after all controller references have been released to ensure no one is can access the request_queue. This fixes a reported use-after-free bug: BUG: KASAN: slab-us…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/03b3bcd319b3ab5182bc9aaa0421351572c78ac0
- https://git.kernel.org/stable/c/4896491c497226022626c3acc46044fd182f943c
- https://git.kernel.org/stable/c/a505f0ba36ab24176c300d7ff56aff85c2977e6c
- https://git.kernel.org/stable/c/e7dac681790556c131854b97551337aa8042215b
- https://git.kernel.org/stable/c/e8061d02b49c5c901980f58d91e96580e9a14acf
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
时间线
- nvd_ingest NVD