CVE-2024-46673

scsi: aacraid: Fix double-free on probe failure

State: Published
Severity: 7.8 High
Published: Sep 13, 2024
Updated: Aug 5, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: aacraid: Fix double-free on probe failure

aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter().

If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member.

After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8e0c5ebde82b08f6d996e11983890fc4cc085fab to before d237c7d06ffddcdb5d36948c527dc01284388218Affected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 564e1986b00c5f05d75342f8407f75f0a17b94dfAffected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 9e96dea7eff6f2bbcd0b42a098012fc66af9eb69Affected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 85449b28ff6a89c4513115e43ddcad949b5890c9Affected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 60962c3d8e18e5d8dfa16df788974dd7f35bd87aAffected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 8a3995a3ffeca280a961b59f5c99843d81b15929Affected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 4b540ec7c0045c2d01c4e479f34bbc8f147afa4cAffected 8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 919ddf8336f0b84c0453bac583808c9f165a85c2Affected
LinuxLinux	2.6.15Affected before 2.6.15Not affected 4.19.321 through 4.19.Not affected 5.4.283 through 5.4.Not affected 5.10.225 through 5.10.Not affected 5.15.166 through 5.15.Not affected 6.1.108 through 6.1.Not affected 6.6.49 through 6.6.Not affected 6.10.8 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

8e0c5ebde82b08f6d996e11983890fc4cc085fab to before d237c7d06ffddcdb5d36948c527dc01284388218Affected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 564e1986b00c5f05d75342f8407f75f0a17b94dfAffected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 9e96dea7eff6f2bbcd0b42a098012fc66af9eb69Affected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 85449b28ff6a89c4513115e43ddcad949b5890c9Affected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 60962c3d8e18e5d8dfa16df788974dd7f35bd87aAffected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 8a3995a3ffeca280a961b59f5c99843d81b15929Affected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 4b540ec7c0045c2d01c4e479f34bbc8f147afa4cAffected
8e0c5ebde82b08f6d996e11983890fc4cc085fab to before 919ddf8336f0b84c0453bac583808c9f165a85c2Affected

LinuxLinux

2.6.15Affected
before 2.6.15Not affected
4.19.321 through 4.19.*Not affected
5.4.283 through 5.4.*Not affected
5.10.225 through 5.10.*Not affected
5.15.166 through 5.15.*Not affected
6.1.108 through 6.1.*Not affected
6.6.49 through 6.6.*Not affected
6.10.8 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.