Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5x9-85f3-f3r4

Опубликовано: 02 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix memory leak in nvmet_alloc_ctrl()

When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

In the Linux kernel, the following vulnerability has been resolved:

nvmet: fix memory leak in nvmet_alloc_ctrl()

When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

EPSS

Процентиль: 58%
0.00905
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

CVSS3: 4.4
redhat
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

CVSS3: 5.3
nvd
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak in nvmet_alloc_ctrl() When creating ctrl in nvmet_alloc_ctrl(), if the cntlid_min is larger than cntlid_max of the subsystem, and jumps to the "out_free_changed_ns_list" label, but the ctrl->sqs lack of be freed. Fix this by jumping to the "out_free_sqs" label.

CVSS3: 5.3
debian
больше 2 лет назад

In the Linux kernel, the following vulnerability has been resolved: n ...

CVSS3: 5.3
fstec
больше 5 лет назад

Уязвимость функции nvmet_alloc_ctrl() модуля drivers/nvme/target/core.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 58%
0.00905
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-401