CVE-2024-56748

一、漏洞信息
漏洞编号：CVE-2024-56748
漏洞组件：linux
漏洞简述：
In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() Hook "qed_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().
漏洞详情参考链接：
https://www.cve.org/CVERecord?id=CVE-2024-56748
漏洞数据来源:
查询CVE官网收集
二、修复参考
漏洞补丁信息：
https://git.kernel.org/stable/c/97384449ddfc07f12ca75f510eb070020d7abb34 
https://git.kernel.org/stable/c/a56777a3ef5b35e24a20c4418bcf88bad033807a 
https://git.kernel.org/stable/c/64654bf5efb3f748e6fc41227adda689618ce9c4 
https://git.kernel.org/stable/c/b514f45e0fe18d763a1afc34401b1585333cb329 
https://git.kernel.org/stable/c/7c1832287b21ff68c4e3625e63cc7619edf5908b 
https://git.kernel.org/stable/c/0e04bd5a11dffe8c1c0e4c9fc79f7d3cd6182dd5 
https://git.kernel.org/stable/c/78a169dc69fbdaf114c40e2d56955bf6bd4fc3c0 
https://git.kernel.org/stable/c/c62c30429db3eb4ced35c7fcf6f04a61ce3a01bb 
三、 影响性参考
是否受影响：是
分析说明：此仓库的kernel为 6.6.48，根据CVE官网给出的影响列表：
Unaffected
unaffected from 0 before 4.11 
unaffected from 5.4.287 through 5.4.* 
unaffected from 5.10.231 through 5.10.* 
unaffected from 5.15.174 through 5.15.* 
unaffected from 6.1.120 through 6.1.* 
unaffected from 6.6.64 through 6.6.* 
unaffected from 6.11.11 through 6.11.* 
unaffected from 6.12.2 through 6.12.* 
unaffected from 6.13-rc1 ，
并没有在 "未受影响" 的范围内列出。所以，根据提供的信息，6.6.48 受影响，且查询系统代码文件drivers/scsi/qedf/qedf_main.c第2739-2742行存在漏洞代码.

openKylin/linux

内容风险标识

评论 (0)

openKylin/linux .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-56748

评论 (0)

搜索帮助

openKylin/linux