DEBIAN-CVE-2024-56764
- Source
- https://security-tracker.debian.org/tracker/CVE-2024-56764
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56764.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-56764
- Upstream
- Published
- 2025-01-06T17:15:42Z
- Modified
- 2025-09-19T06:25:08Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: ublk: detach gendisk from ublk device if adddisk() fails Inside ublkabortrequests(), gendisk is grabbed for aborting all inflight requests. And ublkabortrequests() is called when exiting the uring context or handling timeout. If adddisk() fails, the gendisk may have been freed when calling ublkabortrequests(), so use-after-free can be caused when getting disk's reference in ublkabortrequests(). Fixes the bug by detaching gendisk from ublk device if add_disk() fails.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source