In the Linux kernel, the following vulnerability has been resolved:

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

Hook "qedi_ops->common->sb_init = qed_sb_init" does not release the DMA
memory sb_virt when it fails. Add dma_free_coherent() to free it. This
is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00039.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/10a6fc486ac40a410f0fb84cc15161238eccd20a cve-icon cve-icon
https://git.kernel.org/stable/c/20b775cf274cfbfa3da871a1108877e17b8b19e1 cve-icon cve-icon
https://git.kernel.org/stable/c/4e48e5b26b3edc0e1dd329201ffc924a7a1f9337 cve-icon cve-icon
https://git.kernel.org/stable/c/95bbdca4999bc59a72ebab01663d421d6ce5775d cve-icon cve-icon
https://git.kernel.org/stable/c/a4d2011cbe039b25024831427b60ab91ee247066 cve-icon cve-icon
https://git.kernel.org/stable/c/b778b5240485106abf665eb509cc01779ed0cb00 cve-icon cve-icon
https://git.kernel.org/stable/c/bb8b45883eb072adba297922b67d1467082ac880 cve-icon cve-icon
https://git.kernel.org/stable/c/cfc76acaf2c4b43d1e140f1e4cbde15adb540bc5 cve-icon cve-icon
https://git.kernel.org/stable/c/eaf92fad1f21be63427920c12f22227e5f757424 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024122926-CVE-2024-56747-7c03@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56747 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56747 cve-icon
History

Thu, 17 Apr 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Tue, 07 Jan 2025 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-401
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 30 Dec 2024 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Sun, 29 Dec 2024 11:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() Hook "qedi_ops->common->sb_init = qed_sb_init" does not release the DMA memory sb_virt when it fails. Add dma_free_coherent() to free it. This is the same way as qedr_alloc_mem_sb() and qede_alloc_mem_sb().
Title scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T10:03:45.951Z

Reserved: 2024-12-29T11:26:39.758Z

Link: CVE-2024-56747

cve-icon Vulnrichment

Updated: 2025-04-17T20:05:38.747Z

cve-icon NVD

Status : Modified

Published: 2024-12-29T12:15:08.183

Modified: 2025-04-17T20:15:26.807

Link: CVE-2024-56747

cve-icon Redhat

Severity : Low

Publid Date: 2024-12-29T00:00:00Z

Links: CVE-2024-56747 - Bugzilla

cve-icon OpenCVE Enrichment

No data.