Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Alex Turin

Researcher fromVastData
#39748of 53,625
6.8Total CVSS
Vulnerabilities · 1
PT-2024-29777
6.8
2024-05-28
Linux · Linux Kernel · CVE-2024-42152
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to a possible leak when destroying a controller during queue pair establishment in the nvmet component of the Linux kernel. This occurs due to a small window where the destruction of the queue pair starts concurrently with the admin connect command, leading to a situation where the final reference drop on the controller is prevented. The problem was observed in environments with multiple hosts connecting to multiple controllers simultaneously, causing delays in allocating a controller. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.