In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() Hook "qed_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0e04bd5a11dffe8c1c0e4c9fc79f7d3cd6182dd5 cve-icon cve-icon
https://git.kernel.org/stable/c/64654bf5efb3f748e6fc41227adda689618ce9c4 cve-icon cve-icon
https://git.kernel.org/stable/c/78a169dc69fbdaf114c40e2d56955bf6bd4fc3c0 cve-icon cve-icon
https://git.kernel.org/stable/c/7c1832287b21ff68c4e3625e63cc7619edf5908b cve-icon cve-icon
https://git.kernel.org/stable/c/97384449ddfc07f12ca75f510eb070020d7abb34 cve-icon cve-icon
https://git.kernel.org/stable/c/a56777a3ef5b35e24a20c4418bcf88bad033807a cve-icon cve-icon
https://git.kernel.org/stable/c/b514f45e0fe18d763a1afc34401b1585333cb329 cve-icon cve-icon
https://git.kernel.org/stable/c/c62c30429db3eb4ced35c7fcf6f04a61ce3a01bb cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024122927-CVE-2024-56748-eb85@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56748 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56748 cve-icon
History

Thu, 17 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Mon, 06 Jan 2025 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 30 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Sun, 29 Dec 2024 11:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() Hook "qed_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().
Title scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-29T11:30:14.378Z

Updated: 2025-05-04T10:03:47.511Z

Reserved: 2024-12-29T11:26:39.759Z

Link: CVE-2024-56748

cve-icon Vulnrichment

Updated: 2025-04-17T20:10:14.978Z

cve-icon NVD

Status : Modified

Published: 2024-12-29T12:15:08.303

Modified: 2025-04-17T21:15:50.173

Link: CVE-2024-56748

cve-icon Redhat

Severity : Low

Publid Date: 2024-12-29T00:00:00Z

Links: CVE-2024-56748 - Bugzilla