CVE-2024-46737

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmettcpalloccmds the kernel crashes in nvmettcpreleasequeuework because of a NULL pointer dereference. nvmet: failed to install queue 0...

CVE-2024-46737 nvmet-tcp: fix kernel crash if commands allocation fails

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmettcpalloccmds the kernel crashes in nvmettcpreleasequeuework because of a NULL pointer dereference. nvmet: failed to install queue 0...

CVE-2024-46737

CVE-2024-46737 is a Linux kernel vulnerability tied to nvmet-tcp. The issue occurs when nvmet_tcp_alloc_cmds() fails to allocate commands, causing a NULL pointer dereference in nvmet_tcp_release_queue_work() and kernel crash. The provided fix sets queue->nr_cmds to zero if nvmet_tcp_alloc_cmd(...