References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/534f9dc7fe495b3f9cc84363898ac50c5a25fccb

https://git.kernel.org/stable/c/8d0d2447394b13fb22a069f0330f9c49b7fff9d3

In the Linux kernel, the following vulnerability has been resolved:

nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()

When nvme_identify_ns() fails, it frees the pointer to the struct
nvme_id_ns before it returns. However, ns_update_nuse() calls kfree()
for the pointer even when nvme_identify_ns() fails. This results in
KASAN double-free, which was observed with blktests nvme/045 with
proposed patches [1] on the kernel v6.8-rc7. Fix the double-free by
skipping kfree() when n

kernel.org https://git.kernel.org/stable/c/534f9dc7fe495b3f9cc84363898ac50c5a25fccb [No types assigned]

kernel.org https://git.kernel.org/stable/c/8d0d2447394b13fb22a069f0330f9c49b7fff9d3 [No types assigned]