CVE-2024-56748

Summary

CVE-2024-56748 is a newly identified vulnerability affecting the Linux kernel. In the SCSI subsystem, specifically in the qedf driver, there was a memory leak issue identified. The function qedf_alloc_and_init_sb() failed to release the DMA memory sb_virt when initialization failed. This oversight resulted in a memory leak. To mitigate this issue, dma_free_coherent() has been implemented to correctly free the DMA memory when initialization fails, in accordance with the behavior of other similar functions such as qedr_alloc_mem_sb() and qede_alloc_mem_sb().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.