CVE-2024-41098

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ataportalloc call in atahostalloc fails, atahostrelease will get called. However, the code in atahostrelease tries to free ataport struct members unconditionally, whi...

AZL-47537 CVE-2024-41098 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix null pointer dereference on error If the ataportalloc call in atahostalloc fails, atahostrelease will get called. However, the code in atahostrelease tries to free ataport struct members unconditionally, whi...

CVE-2024-41098

CVE-2024-41098 is a Linux kernel vulnerability in the libata-core path. The issue arises when ata_port_alloc() fails during ata_host_alloc(); ata_host_release() then frees ata_port struct members unconditionally, which can cause a NULL pointer dereference (BUG: page fault). The provided trace sho...