Riskcovery

CVE-2024-46843

scsi: ufs: core: Remove SCSI host only if added

State
Published
Severity
Not scored
Published
Sep 27, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Remove SCSI host only if added

If host tries to remove ufshcd driver from a UFS device it would cause a kernel panic if ufshcd_async_scan fails during ufshcd_probe_hba before adding a SCSI host with scsi_add_host and MCQ is enabled since SCSI host has been defered after MCQ configuration introduced by commit 0cab4023ec7b ("scsi: ufs: core: Defer adding host to SCSI if MCQ is supported").

To guarantee that SCSI host is removed only if it has been added, set the scsi_host_added flag to true after adding a SCSI host and check whether it is set or not before removing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to before 2f49e05d6b58d660f035a75ff96b77071b4bd5edAffected
  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to before 3844586e9bd9845140e1078f1e61896b576ac536Affected
  • 0cab4023ec7b49b18145f74ab8389678d6d58878 to before 7cbff570dbe8907e23bba06f6414899a0fbb2fccAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.