NVD Vulnerability Detail

CVE-2024-47730

Summary	In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - inject error before stopping queue The master ooo cannot be completely closed when the accelerator core reports memory error. Therefore, the driver needs to inject the qm error to close the master ooo. Currently, the qm error is injected after stopping queue, memory may be released immediately after stopping queue, causing the device to access the released memory. Therefore, error is injected to close master ooo before stopping queue to ensure that the device does not access the released memory.
Publication Date	Oct. 21, 2024, 10:15 p.m.
Registration Date	Oct. 22, 2024, 5 a.m.
Last Update	Oct. 24, 2024, 2:03 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/98d3be34c9153eceadb56de50d9f9347e88d86e4	Patch
2	https://git.kernel.org/stable/c/aa3e0db35a60002fb34ef0e4ad203aa59fd00203	Patch
3	https://git.kernel.org/stable/c/f8024f12752e32ffbbf59e1c09d949f977ff743f	Patch
4	https://git.kernel.org/stable/c/c5f5b813e546f7fe133539c3d7a5086cc8dd2aa1	Patch
5	https://git.kernel.org/stable/c/b04f06fc0243600665b3b50253869533b7938468	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-416	解放済みメモリの使用	https://cwe.mitre.org/data/definitions/416.html

JVN Vulnerability Information

Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性

Title	Linux の Linux Kernel における解放済みメモリの使用に関する脆弱性
Summary	Linux の Linux Kernel には、解放済みメモリの使用に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 6, 2024, midnight
Registration Date	Oct. 25, 2024, 2:29 p.m.
Last Update	Oct. 25, 2024, 2:29 p.m.

Affected System

Linux

Linux Kernel 5.8 以上 6.1.113 未満

Linux Kernel 6.11 以上 6.11.2 未満

Linux Kernel 6.2 以上 6.6.54 未満

Linux Kernel 6.7 以上 6.10.13 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-47730	https://www.cve.org/CVERecord?id=CVE-2024-47730
National Vulnerability Database (NVD)
2	CVE-2024-47730	https://nvd.nist.gov/vuln/detail/CVE-2024-47730

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-416	https://cwe.mitre.org/data/definitions/416.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	crypto: hisilicon/qm - inject error before stopping queue (98d3be3)	https://git.kernel.org/stable/c/98d3be34c9153eceadb56de50d9f9347e88d86e4
2	crypto: hisilicon/qm - inject error before stopping queue (aa3e0db)	https://git.kernel.org/stable/c/aa3e0db35a60002fb34ef0e4ad203aa59fd00203
3	crypto: hisilicon/qm - inject error before stopping queue (b04f06f)	https://git.kernel.org/stable/c/b04f06fc0243600665b3b50253869533b7938468
4	crypto: hisilicon/qm - inject error before stopping queue (c5f5b81)	https://git.kernel.org/stable/c/c5f5b813e546f7fe133539c3d7a5086cc8dd2aa1
5	crypto: hisilicon/qm - inject error before stopping queue (f8024f1)	https://git.kernel.org/stable/c/f8024f12752e32ffbbf59e1c09d949f977ff743f
Linux Kernel
6	Linux Kernel Archives	https://www.kernel.org

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 2:29 p.m.