CVE-2024-50153

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50153
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50153.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50153
Downstream
Related
Published
2024-11-07T09:31:29.791Z
Modified
2026-05-07T04:16:57.517570Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
scsi: target: core: Fix null-ptr-deref in target_alloc_device()
Details

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: core: Fix null-ptr-deref in targetallocdevice()

There is a null-ptr-deref issue reported by KASAN:

BUG: KASAN: null-ptr-deref in targetallocdevice+0xbc4/0xbe0 [targetcoremod] ... kasanreport+0xb9/0xf0 targetallocdevice+0xbc4/0xbe0 [targetcoremod] coredevsetupvirtuallun0+0xef/0x1f0 [targetcoremod] targetcoreinitconfigfs+0x205/0x420 [targetcoremod] dooneinitcall+0xdd/0x4e0 ... entrySYSCALL64afterhwframe+0x76/0x7e

In targetallocdevice(), if allocing memory for dev queues fails, then dev will be freed by dev->transport->free_device(), but dev->transport is not initialized at that time, which will lead to a null pointer reference problem.

Fixing this bug by freeing dev with hba->backend->ops->free_device().

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50153.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
008b936bbde3e87a611b3828a0d5d2a4f99026a0
Fixed
8c1e6717f60d31f8af3937c23c4f1498529584e1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1526d9f10c6184031e42afad0adbdde1213e8ad1
Fixed
39e02fa90323243187c91bb3e8f2f5f6a9aacfc7
Fixed
895ab729425ef9bf3b6d2f8d0853abe64896f314
Fixed
b80e9bc85bd9af378e7eac83e15dd129557bbdb6
Fixed
14a6a2adb440e4ae97bee73b2360946bd033dadd
Fixed
fca6caeb4a61d240f031914413fcc69534f6dc03

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50153.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.229
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.170
Fixed
6.1.115
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.6.59
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.11.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50153.json"