CVE-2024-56756

216.73.216.67

· Published 29/12/2024 12:15 · Modified 06/01/2025 20:33

Labels: CVE-2024-56756 2024-12-29 416baaa9-dc9f-4396-8d5f-8c081fb06d67 CVE-2024-56756 NVD-CWE-Other

Essential information

Published: 29/12/2024 12:15
Modified: 06/01/2025 20:33
Author: —
Creator: —
CVSS: 5.5 MEDIUM (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS metrics

Description

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but __nvme_alloc_host_mem could break out of the loop earlier on memory allocation failure and end up using less descriptors than planned for, which leads to an incorrect size passed to dma_free_coherent. In practice this was not showing up because the number of descriptors tends to be low and the dma coherent allocator always allocates and frees at least a page.

NVD status

Status: Analyzed — CVE has been recently published to the CVE List and has been received by the NVD.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD: View on NVD

Affected products (CPE)

Product	CPE
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`
linux / linux kernel	`cpe:2.3:o:linux:linux_kernel::::::::`