Riskcovery

CVE-2024-49852

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

The kref_put() function will call nport->release if the refcount drops to zero. The nport->release release function is _efc_nport_free() which frees "nport". But then we dereference "nport" on the next line which is a use after free. Re-order these lines to avoid the use after free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before 16a570f07d870a285b0c0b0d1ca4dff79e8aa5ffAffected
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before abc71e89170ed32ecf0a5a29f31aa711e143e941Affected
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before baeb8628ab7f4577740f00e439d3fdf7c876b0ffAffected
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before 7c2908985e4ae0ea1b526b3916de9e5351650908Affected
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before 98752fcd076a8cbc978016eae7125b4971be1eecAffected
  • fcd427303eb90aa3cb08e7e0b68e0e67a6d47346 to before 2e4b02fad094976763af08fec2c620f4f8edd9aeAffected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.