PT-2024-29827 · Linux+6 · Linux Kernel+6
Published
2024-07-25
·
Updated
2025-10-02
·
CVE-2024-42276
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the nvme-pci component of the Linux kernel and involves a missing condition check for the existence of mapped data. This can lead to a potential denial of service when the
nvme unmap data() function is called without the necessary condition check, which is supposed to mirror the condition in nvme map data() for requests with physical segments.Recommendations
To resolve the issue, update the Linux kernel to version 6.6.50 or later.
As a temporary workaround, consider restricting access to the nvme-pci component until a patch is available.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu