CVE-2024-56748

scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

State: Published
Severity: 3.3 Low
Published: Dec 29, 2024
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

Hook "qed_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L	CISA-ADP

Weaknesses

CWE-401 Missing Release of Memory after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	61d8658b4a435eac729966cc94cdda077a8df5cd to before 97384449ddfc07f12ca75f510eb070020d7abb34Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before a56777a3ef5b35e24a20c4418bcf88bad033807aAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 64654bf5efb3f748e6fc41227adda689618ce9c4Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before b514f45e0fe18d763a1afc34401b1585333cb329Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 7c1832287b21ff68c4e3625e63cc7619edf5908bAffected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 0e04bd5a11dffe8c1c0e4c9fc79f7d3cd6182dd5Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before 78a169dc69fbdaf114c40e2d56955bf6bd4fc3c0Affected 61d8658b4a435eac729966cc94cdda077a8df5cd to before c62c30429db3eb4ced35c7fcf6f04a61ce3a01bbAffected
LinuxLinux	4.11Affected before 4.11Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.*Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

61d8658b4a435eac729966cc94cdda077a8df5cd to before 97384449ddfc07f12ca75f510eb070020d7abb34Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before a56777a3ef5b35e24a20c4418bcf88bad033807aAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 64654bf5efb3f748e6fc41227adda689618ce9c4Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before b514f45e0fe18d763a1afc34401b1585333cb329Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 7c1832287b21ff68c4e3625e63cc7619edf5908bAffected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 0e04bd5a11dffe8c1c0e4c9fc79f7d3cd6182dd5Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before 78a169dc69fbdaf114c40e2d56955bf6bd4fc3c0Affected
61d8658b4a435eac729966cc94cdda077a8df5cd to before c62c30429db3eb4ced35c7fcf6f04a61ce3a01bbAffected

LinuxLinux

4.11Affected
before 4.11Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.