CVE-2024-46735

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue has been resolved in the Linux kernel. The issue occurs when two UBLK CMD START USER RECOVERY commands are submitted, with the first one setting 'ubq->ubq daemon' to NULL, and the second one triggering WARN in ublk queue reinit() and subsequently a NULL pointer dereference issue. The fix involves adding a check in ublk ctrl start recovery() to return immediately in case of zero 'ub->nr queues ready'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.