CVE-2024-47666

scsi: pm80xx: Set phy->enable_completion only when we wait for it

State: Published
Severity: Not scored
Published: Oct 9, 2024
Updated: May 11, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: pm80xx: Set phy->enable_completion only when we wait for it

pm8001_phy_control() populates the enable_completion pointer with a stack address, sends a PHY_LINK_RESET / PHY_HARD_RESET, waits 300 ms, and returns. The problem arises when a phy control response comes late. After 300 ms the pm8001_phy_control() function returns and the passed enable_completion stack address is no longer valid. Late phy control response invokes complete() on a dangling enable_completion pointer which leads to a kernel crash.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	869ddbdcae3b4fb83b99889abae31544c149b210 to before ddc501f4130f4baa787cb6cfa309af697179f475Affected 869ddbdcae3b4fb83b99889abae31544c149b210 to before a5d954802bda1aabcba49633cd94bad91c94113fAffected 869ddbdcae3b4fb83b99889abae31544c149b210 to before e23ee0cc5bded07e700553aecc333bb20c768546Affected 869ddbdcae3b4fb83b99889abae31544c149b210 to before 7b1d779647afaea9185fa2f150b1721e7c1aae89Affected 869ddbdcae3b4fb83b99889abae31544c149b210 to before f14d3e1aa613311c744af32d75125e95fc8ffb84Affected 869ddbdcae3b4fb83b99889abae31544c149b210 to before e4f949ef1516c0d74745ee54a0f4882c1f6c7aeaAffected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.51 through 6.6.Not affected 6.10.10 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

869ddbdcae3b4fb83b99889abae31544c149b210 to before ddc501f4130f4baa787cb6cfa309af697179f475Affected
869ddbdcae3b4fb83b99889abae31544c149b210 to before a5d954802bda1aabcba49633cd94bad91c94113fAffected
869ddbdcae3b4fb83b99889abae31544c149b210 to before e23ee0cc5bded07e700553aecc333bb20c768546Affected
869ddbdcae3b4fb83b99889abae31544c149b210 to before 7b1d779647afaea9185fa2f150b1721e7c1aae89Affected
869ddbdcae3b4fb83b99889abae31544c149b210 to before f14d3e1aa613311c744af32d75125e95fc8ffb84Affected
869ddbdcae3b4fb83b99889abae31544c149b210 to before e4f949ef1516c0d74745ee54a0f4882c1f6c7aeaAffected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.51 through 6.6.*Not affected
6.10.10 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.