CVE-2024-43913

MEDIUM5.5

nvme: apple: fix device reference counting

Published Aug 26, 2024

Modified 8 months ago

No fix available

Details

In the Linux kernel, the following vulnerability has been resolved:

nvme: apple: fix device reference counting

Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.

References

WEBhttps://git.kernel.org/stable/c/b9ecbfa45516182cd062fecd286db7907ba84210 WEBhttps://git.kernel.org/stable/c/d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3d WEBhttps://git.kernel.org/stable/c/f7d9a18572fcd7130459b7691bd19ee2a2e951ad ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2024-43913

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedAug 26, 2024

ModifiedMay 4, 2025