In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: fix kernel crash if commands allocation fails
If the commands allocation fails in nvmettcpalloccmds() the kernel crashes in nvmettcpreleasequeue_work() because of a NULL pointer dereference.
nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008
Fix the bug by setting queue->nrcmds to zero in case nvmettcpalloccmd() fails.
[
{
"signature_type": "Line",
"id": "CVE-2024-46737-1aa77a6f",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91dad30c5607e62864f888e735d0965567827bdf",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228426629030209373595059149417839110500",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-53020674",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7957c731fc2b23312f8935812dee5a0b14b04e2d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228426629030209373595059149417839110500",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-5ae936d6",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@489f2913a63f528cfe3f21722583fb981967ecda",
"digest": {
"threshold": 0.9,
"line_hashes": [
"228426629030209373595059149417839110500",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-6cc275ac",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50632b877ce55356f5d276b9add289b1e7ddc683",
"digest": {
"function_hash": "232324048686750718425309117187632959479",
"length": 282.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-7bf84da5",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5572a55a6f830ee3f3a994b6b962a5c327d28cb3",
"digest": {
"function_hash": "40719845478253656063500361274927362354",
"length": 577.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-83ab5561",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7957c731fc2b23312f8935812dee5a0b14b04e2d",
"digest": {
"function_hash": "165266367596571350787053593155748925706",
"length": 291.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-98ef6703",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03e1fd0327fa5e2174567f5fe9290fe21d21b8f4",
"digest": {
"function_hash": "232324048686750718425309117187632959479",
"length": 282.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-9adc151f",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91dad30c5607e62864f888e735d0965567827bdf",
"digest": {
"function_hash": "165266367596571350787053593155748925706",
"length": 291.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-9f0cdfbc",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c04d1e3ab22cc5394ef656429638a5947f87244",
"digest": {
"function_hash": "40719845478253656063500361274927362354",
"length": 577.0
}
},
{
"signature_type": "Function",
"id": "CVE-2024-46737-b892776b",
"target": {
"function": "nvmet_tcp_install_queue",
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@489f2913a63f528cfe3f21722583fb981967ecda",
"digest": {
"function_hash": "165266367596571350787053593155748925706",
"length": 291.0
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-bb0e1874",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c04d1e3ab22cc5394ef656429638a5947f87244",
"digest": {
"threshold": 0.9,
"line_hashes": [
"274770535727806149050465572115512104982",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-c72c3c77",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5572a55a6f830ee3f3a994b6b962a5c327d28cb3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"274770535727806149050465572115512104982",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-f3d21da9",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50632b877ce55356f5d276b9add289b1e7ddc683",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251621637734011421113425116460429242403",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
},
{
"signature_type": "Line",
"id": "CVE-2024-46737-fb3746bb",
"target": {
"file": "drivers/nvme/target/tcp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03e1fd0327fa5e2174567f5fe9290fe21d21b8f4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"251621637734011421113425116460429242403",
"87462863548323647774873038035438547625",
"163587198337205831316766594965454561708",
"34773613461600127195444056926553166758",
"292883775822037071748257272993841364273"
]
}
}
]