CVE-2024-43913
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2024-08-26
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.
Weakness Classification (1)
Affected Software (6)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < 0c9e4e99dcc0d30160d65044f54a92ff6372c90d |
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < f7d9a18572fcd7130459b7691bd19ee2a2e951ad |
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3d |
| Linux | Linux | 5bd2927aceba181b84286e00aa2f56e117e699c3 < b9ecbfa45516182cd062fecd286db7907ba84210 |
| Linux | Linux | 5.19 |
| linux | linux_kernel | < 6.10.5 |