Riskcovery

CVE-2024-43913

nvme: apple: fix device reference counting

State
Published
Severity
7.0 High
Published
Aug 26, 2024
Updated
Oct 30, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme: apple: fix device reference counting

Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5bd2927aceba181b84286e00aa2f56e117e699c3 to before 0c9e4e99dcc0d30160d65044f54a92ff6372c90dAffected
  • 5bd2927aceba181b84286e00aa2f56e117e699c3 to before f7d9a18572fcd7130459b7691bd19ee2a2e951adAffected
  • 5bd2927aceba181b84286e00aa2f56e117e699c3 to before d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3dAffected
  • 5bd2927aceba181b84286e00aa2f56e117e699c3 to before b9ecbfa45516182cd062fecd286db7907ba84210Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.64 through 6.6.*Not affected
  • 6.10.5 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.