CVE-2024-46843
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Oct 8, 2024
Summary
CVE-2024-46843 is a vulnerability affecting the Linux kernel's SCSI subsystem. The issue arises when trying to remove a UFS device's ufshcd driver without ensuring that the associated SCSI host has been properly added. If ufshcd_async_scan fails during ufshcd_probe_hba before adding the SCSI host with scsi_add_host, an unexpected kernel panic occurs. To prevent this, developers must set the scsi_host_added flag to true upon adding a SCSI host and verify that it remains set before attempting removal.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.