CVE-2024-42276

nvme-pci: add missing condition check for existence of mapped data

State: Published
Severity: 7.8 High
Published: Aug 17, 2024
Updated: Oct 15, 2026
Reserved: Jul 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme-pci: add missing condition check for existence of mapped data

nvme_map_data() is called when request has physical segments, hence the nvme_unmap_data() should have same condition to avoid dereference.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4aedb705437f6f98b45f45c394e6803ca67abd33 to before 3f8ec1d6b0ebd8268307d52be8301973fa5a01ecAffected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before be23ae63080e0bf9e246ab20207200bca6585ebaAffected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before 7cc1f4cd90a00b6191cb8cda2d1302fdce59361cAffected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before d135c3352f7c947a922da93c8e763ee6bc208b64Affected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before 77848b379e9f85a08048a2c8b3b4a7e8396f5f83Affected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before 70100fe721840bf6d8e5abd25b8bffe4d2e049b7Affected 4aedb705437f6f98b45f45c394e6803ca67abd33 to before c31fad1470389666ac7169fe43aa65bf5b7e2cfdAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.282 through 5.4.Not affected 5.10.224 through 5.10.Not affected 5.15.165 through 5.15.Not affected 6.1.103 through 6.1.Not affected 6.6.44 through 6.6.Not affected 6.10.3 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

4aedb705437f6f98b45f45c394e6803ca67abd33 to before 3f8ec1d6b0ebd8268307d52be8301973fa5a01ecAffected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before be23ae63080e0bf9e246ab20207200bca6585ebaAffected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before 7cc1f4cd90a00b6191cb8cda2d1302fdce59361cAffected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before d135c3352f7c947a922da93c8e763ee6bc208b64Affected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before 77848b379e9f85a08048a2c8b3b4a7e8396f5f83Affected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before 70100fe721840bf6d8e5abd25b8bffe4d2e049b7Affected
4aedb705437f6f98b45f45c394e6803ca67abd33 to before c31fad1470389666ac7169fe43aa65bf5b7e2cfdAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.282 through 5.4.*Not affected
5.10.224 through 5.10.*Not affected
5.15.165 through 5.15.*Not affected
6.1.103 through 6.1.*Not affected
6.6.44 through 6.6.*Not affected
6.10.3 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.