CVE-2024-56756

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns a memory mismanagement problem in the Linux kernel's nvme-pci descriptor table. Specifically, the HMB descriptor table is sized to match the maximum number of descriptors that could be used for a given device. However, in cases of memory allocation failure, the nvme alloc host mem function could exit the loop earlier and use fewer descriptors than planned, resulting in an incorrect size being passed to dma free coherent. In practice, this issue was not typically observed due to the low number of descriptors used and the dma coherent allocator's behavior of always allocating and freeing at least a page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.