CVE-2024-26760 scsi: target: pscsi: Fix bio_put() for error case

2024-04-0317:00:44

Linux

github.com

linux kernel

vulnerability

scsi

target

pscsi

bio_put()

commit

bio_kmalloc

bio_uninit()

kfree()

error case

warn

null pointer dereference

bio_free

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: pscsi: Fix bio_put() for error case

As of commit 066ff571011d (“block: turn bio_kmalloc into a simple kmalloc
wrapper”), a bio allocated by bio_kmalloc() must be freed by bio_uninit()
and kfree(). That is not done properly for the error case, hitting WARN and
NULL pointer dereference in bio_free().