Description
In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECIAL_LOAD when the request is cleaned.
References (8)
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
6.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-415
Status
published
Products (7)
debian/debian_linux
11.0
linux/Kernel
4.10.0 - 5.10.237linux
linux/Kernel
5.11.0 - 5.15.164linux
linux/Kernel
5.16.0 - 6.1.101linux
linux/Kernel
6.2.0 - 6.6.42linux
linux/Kernel
6.7.0 - 6.9.11linux
linux/linux_kernel
4.10 - 5.10.237
Published
Jul 29, 2024
Tracked Since
Feb 18, 2026