In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
nvme-pci: release descriptor pools on probe failure<\/p>\n
The per-NUMA-node descriptor DMA pools are created lazily from
\nnvme_init_hctx_common() once the admin tag set is allocated, but they are
\nonly destroyed in nvme_remove() via nvme_release_descriptor_pools(). Any
\nprobe failure after the admin tag set has been allocated unwinds through
\nthe out_disable label and nvme_pci_free_ctrl(), neither of which releases
\nthe pools, leaking the dma_pool objects.<\/p>\n
Release the descriptor pools in the out_disable error path. It must not
\nbe added to nvme_pci_free_ctrl(), as that would double-free against
\nnvme_remove() on the normal teardown path.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
nvme-pci: release descriptor pools on probe failure<\/p>\n
The per-NUMA-node descriptor DMA pools are created lazily from
\nnvme_init_hctx_<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25642","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}