Riskcovery

CVE-2024-41073

nvme: avoid double free special payload

State
Published
Severity
9.8 Critical
Published
Jul 29, 2024
Updated
Aug 5, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme: avoid double free special payload

If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECIAL_LOAD when the request is cleaned.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before 882574942a9be8b9d70d13462ddacc80c4b385baAffected
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before c5942a14f795de957ae9d66027aac8ff4fe70057Affected
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before f3ab45aacd25d957547fb6d115c1574c20964b3bAffected
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before ae84383c96d6662c24697ab6b44aae855ab670aaAffected
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before 1b9fd1265fac85916f90b4648de02adccdb7220bAffected
  • f9d03f96b988002027d4b28ea1b7a24729a4c9b5 to before e5d574ab37f5f2e7937405613d9b1a724811e5adAffected
LinuxLinux
  • 4.10Affected
  • before 4.10Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.164 through 5.15.*Not affected
  • 6.1.101 through 6.1.*Not affected
  • 6.6.42 through 6.6.*Not affected
  • 6.9.11 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.