In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on th…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on the namespaces may exist after tearing down the controller. Ensure the admin request_queue is active by moving the controller's 'put' to after all controller references have been released to ensure no one is can access the request_queue. This fixes a reported use-after-free bug: BUG: KASAN: slab-us…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/03b3bcd319b3ab5182bc9aaa0421351572c78ac0
- https://git.kernel.org/stable/c/4896491c497226022626c3acc46044fd182f943c
- https://git.kernel.org/stable/c/a505f0ba36ab24176c300d7ff56aff85c2977e6c
- https://git.kernel.org/stable/c/e7dac681790556c131854b97551337aa8042215b
- https://git.kernel.org/stable/c/e8061d02b49c5c901980f58d91e96580e9a14acf
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Timeline
- nvd_ingest NVD