CVE-2024-26760: scsi: target: pscsi: Fix bio_put() for error case
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: pscsi: Fix bioput() for error case
As of commit 066ff571011d ("block: turn biokmalloc into a simple kmalloc wrapper"), a bio allocated by biokmalloc() must be freed by biouninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in biofree().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26760?
CVE-2024-26760 has not been assigned a specific severity rating; however, it addresses a critical fix in the Linux kernel.
How do I fix CVE-2024-26760?
To fix CVE-2024-26760, update to the latest version of the Linux kernel that contains the appropriate patches.
What versions of the Linux kernel are affected by CVE-2024-26760?
CVE-2024-26760 affects Linux kernel versions from 5.19 to 6.1.80 and 6.2 to 6.6.19, as well as specific release candidates.
What type of vulnerability is CVE-2024-26760?
CVE-2024-26760 is a vulnerability related to improper memory management in the SCSI target subsystem of the Linux kernel.
Is there a workaround for CVE-2024-26760?
No specific workaround has been recommended for CVE-2024-26760; the preferred solution is to apply the necessary kernel updates.