CVE-2024-42276

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to the nvme-pci component of the Linux kernel and involves a missing condition check for the existence of mapped data. This can lead to a potential denial of service when the nvme unmap data() function is called without the necessary condition check, which is supposed to mirror the condition in nvme map data() for requests with physical segments.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider restricting access to the nvme-pci component until a patch is available.