CVE-2024-41073
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A double free of special payload in the NVMe subsystem of the Linux kernel was found. If a discard request needs retry and the retry fails before a new payload is added, a double free occurs.
Risk Assessment
This can lead to system crashes or potential code execution by an attacker able to send NVMe requests.
Recommendation
Apply a Linux kernel update containing the fix that clears the RQF_SPECIAL_LOAD flag when the request is cleaned.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: nvme: avoid double free special payload If a discard request needs to be retried, and that retry may fail before a new special payload is added, a double free will result. Clear the RQF_SPECIAL_LOAD when the request is cleaned.