CVE-2024-50153

scsi: target: core: Fix null-ptr-deref in target_alloc_device()

State: Published
Severity: 5.5 Medium
Published: Nov 7, 2024
Updated: Oct 15, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: target: core: Fix null-ptr-deref in target_alloc_device()

There is a null-ptr-deref issue reported by KASAN:

BUG: KASAN: null-ptr-deref in target_alloc_device+0xbc4/0xbe0 [target_core_mod] ... kasan_report+0xb9/0xf0 target_alloc_device+0xbc4/0xbe0 [target_core_mod] core_dev_setup_virtual_lun0+0xef/0x1f0 [target_core_mod] target_core_init_configfs+0x205/0x420 [target_core_mod] do_one_initcall+0xdd/0x4e0 ... entry_SYSCALL_64_after_hwframe+0x76/0x7e

In target_alloc_device(), if allocing memory for dev queues fails, then dev will be freed by dev->transport->free_device(), but dev->transport is not initialized at that time, which will lead to a null pointer reference problem.

Fixing this bug by freeing dev with hba->backend->ops->free_device().

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	008b936bbde3e87a611b3828a0d5d2a4f99026a0 to before 8c1e6717f60d31f8af3937c23c4f1498529584e1Affected 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 39e02fa90323243187c91bb3e8f2f5f6a9aacfc7Affected 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 895ab729425ef9bf3b6d2f8d0853abe64896f314Affected 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before b80e9bc85bd9af378e7eac83e15dd129557bbdb6Affected 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 14a6a2adb440e4ae97bee73b2360946bd033daddAffected 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before fca6caeb4a61d240f031914413fcc69534f6dc03Affected 5.10.180 to before 5.10.229Affected
LinuxLinux	5.11Affected before 5.11Not affected 5.10.229 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

008b936bbde3e87a611b3828a0d5d2a4f99026a0 to before 8c1e6717f60d31f8af3937c23c4f1498529584e1Affected
1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 39e02fa90323243187c91bb3e8f2f5f6a9aacfc7Affected
1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 895ab729425ef9bf3b6d2f8d0853abe64896f314Affected
1526d9f10c6184031e42afad0adbdde1213e8ad1 to before b80e9bc85bd9af378e7eac83e15dd129557bbdb6Affected
1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 14a6a2adb440e4ae97bee73b2360946bd033daddAffected
1526d9f10c6184031e42afad0adbdde1213e8ad1 to before fca6caeb4a61d240f031914413fcc69534f6dc03Affected
5.10.180 to before 5.10.229Affected

LinuxLinux

5.11Affected
before 5.11Not affected
5.10.229 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.