CVE-2024-35954

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL pointer exception in the sg remove sfp usercontext() function. This exception occurs because sg device destroy() is called after scsi device put(), which sets the parent scsi device request queue to NULL. As a result, accessing this queue leads to a crash. The vulnerability may allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.