ghsa-2398-v7wm-x7gr
Vulnerability from github
Published
2024-12-29 12:30
Modified
2025-01-06 21:30
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details

In the Linux kernel, the following vulnerability has been resolved:

nvme-pci: fix freeing of the HMB descriptor table

The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but __nvme_alloc_host_mem could break out of the loop earlier on memory allocation failure and end up using less descriptors than planned for, which leads to an incorrect size passed to dma_free_coherent.

In practice this was not showing up because the number of descriptors tends to be low and the dma coherent allocator always allocates and frees at least a page.

Show details on source website

To clipboard 

{
   affected: [],
   aliases: [
      "CVE-2024-56756",
   ],
   database_specific: {
      cwe_ids: [],
      github_reviewed: false,
      github_reviewed_at: null,
      nvd_published_at: "2024-12-29T12:15:09Z",
      severity: "MODERATE",
   },
   details: "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-pci: fix freeing of the HMB descriptor table\n\nThe HMB descriptor table is sized to the maximum number of descriptors\nthat could be used for a given device, but __nvme_alloc_host_mem could\nbreak out of the loop earlier on memory allocation failure and end up\nusing less descriptors than planned for, which leads to an incorrect\nsize passed to dma_free_coherent.\n\nIn practice this was not showing up because the number of descriptors\ntends to be low and the dma coherent allocator always allocates and\nfrees at least a page.",
   id: "GHSA-2398-v7wm-x7gr",
   modified: "2025-01-06T21:30:51Z",
   published: "2024-12-29T12:30:41Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://nvd.nist.gov/vuln/detail/CVE-2024-56756",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/3c2fb1ca8086eb139b2a551358137525ae8e0d7a",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/452f9ddd12bebc04cef741e8ba3806bf0e1fd015",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/582d9ed999b004fb1d415ecbfa86d4d8df455269",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/6d0f599db73b099aa724a12736369c4d4d92849d",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/869cf50b9c9d1059f5223f79ef68fc0bc6210095",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/ac22240540e0c5230d8c4138e3778420b712716a",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/cee3bff51a35cab1c5d842d409a7b11caefe2386",
      },
      {
         type: "WEB",
         url: "https://git.kernel.org/stable/c/fb96d5cfa97a7363245b3dd523f475b04296d87b",
      },
   ],
   schema_version: "1.4.0",
   severity: [
      {
         score: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
         type: "CVSS_V3",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.