CVE-2024-26760

2024-04-0400:33:36

redhat.com

access.redhat.com

linux kernel

vulnerability

scsi

pscsi

bio_put()

error case

commit 066ff571011d

bio_kmalloc()

bio_uninit()

kfree()

warn

null pointer dereference

bio_free()

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved: scsi: target: pscsi: Fix bio_put() for error case As of commit 066ff571011d (“block: turn bio_kmalloc into a simple kmalloc wrapper”), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().