CVE-2024-43913

Source
https://cve.org/CVERecord?id=CVE-2024-43913
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43913.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-43913
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (1)
ROOT (1)
SUSE (8)
UBUNTU (1)
Related
Published
2024-08-26T10:11:18Z
Modified
2026-11-01T02:30:47Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
nvme: apple: fix device reference counting
Details

In the Linux kernel, the following vulnerability has been resolved:

nvme: apple: fix device reference counting

Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43913.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5bd2927aceba181b84286e00aa2f56e117e699c3
Fixed
0c9e4e99dcc0d30160d65044f54a92ff6372c90d
Fixed
f7d9a18572fcd7130459b7691bd19ee2a2e951ad
Fixed
d59c4d0eb6adc24c2201f153ccb7fd0a335b0d3d
Fixed
b9ecbfa45516182cd062fecd286db7907ba84210

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43913.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.64
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43913.json"