Riskcovery

CVE-2024-50026

scsi: wd33c93: Don't use stale scsi_pointer value

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: wd33c93: Don't use stale scsi_pointer value

A regression was introduced with commit dbb2da557a6a ("scsi: wd33c93: Move the SCSI pointer to private command data") which results in an oops in wd33c93_intr(). That commit added the scsi_pointer variable and initialized it from hostdata->connected. However, during selection, hostdata->connected is not yet valid. Fix this by getting the current scsi_pointer from hostdata->selecting.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • dbb2da557a6a87c88bbb4b1fef037091b57f701b to before 3afeceda855dea9b85cddd96307d4d17c8742005Affected
  • dbb2da557a6a87c88bbb4b1fef037091b57f701b to before e04642a207f1d2ae28a08624c04c67f5681f3451Affected
  • dbb2da557a6a87c88bbb4b1fef037091b57f701b to before b60ff1a95c7c386cdd6153de3d7d85edaeabd800Affected
  • dbb2da557a6a87c88bbb4b1fef037091b57f701b to before 9023ed8d91eb1fcc93e64dc4962f7412b1c4cbecAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.57 through 6.6.*Not affected
  • 6.11.4 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.