CVE-2024-42152

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible leak when destroying a controller during queue pair establishment in the nvmet component of the Linux kernel. This occurs due to a small window where the destruction of the queue pair starts concurrently with the admin connect command, leading to a situation where the final reference drop on the controller is prevented. The problem was observed in environments with multiple hosts connecting to multiple controllers simultaneously, causing delays in allocating a controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.