< Back

CVE-2024-56756

Updated on 29 Dec 2024

Severity

5.5 Medium severity

Details

CVSS score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

nvme-pci: fix freeing of the HMB descriptor table

The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but __nvme_alloc_host_mem could break out of the loop earlier on memory allocation failure and end up using less descriptors than planned for, which leads to an incorrect size passed to dma_free_coherent.

In practice this was not showing up because the number of descriptors tends to be low and the dma coherent allocator always allocates and frees at least a page.

Details

Affected product:: AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Debian 10 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:: kernel-uek @ 5.4.17 (+12 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 9.2 ESU	Ready For Release	—
AlmaLinux 9.6 ESU	Planned	—
Amazon Linux 2023	Planned	—
Amazon Linux 2 5.10	Will Not Fix	—
Debian 11	Planned	—
Debian 11 cloud	Planned	—
Debian 12	Planned	—
Oracle Linux 7 UEK 6	Released	112 kernels 5.4.17-2011.2.2.el7uek 5.4.17-2011.1.2.el7uek 5.4.17-2011.3.2.1.el7uek 5.4.17-2011.0.7.el7uek 5.4.17-2011.4.4.el7uek 5.4.17-2011.4.6.el7uek 5.4.17-2011.5.3.el7uek 5.4.17-2011.6.2.el7uek 5.4.17-2011.7.4.el7uek 5.4.17-2036.100.6.1.el7uek 5.4.17-2036.101.2.el7uek 5.4.17-2036.102.0.2.el7uek 5.4.17-2036.103.3.el7uek 5.4.17-2036.103.3.1.el7uek 5.4.17-2036.104.4.el7uek 5.4.17-2036.104.5.el7uek 5.4.17-2102.200.13.el7uek 5.4.17-2102.201.3.el7uek 5.4.17-2102.202.5.el7uek 5.4.17-2102.203.5.el7uek 5.4.17-2102.203.6.el7uek 5.4.17-2102.204.4.2.el7uek 5.4.17-2102.204.4.3.el7uek 5.4.17-2102.204.4.4.el7uek 5.4.17-2102.205.7.2.el7uek 5.4.17-2102.205.7.3.el7uek 5.4.17-2102.206.1.el7uek 5.4.17-2136.300.7.el7uek 5.4.17-2136.301.1.2.el7uek 5.4.17-2136.301.1.4.el7uek 5.4.17-2136.302.6.1.el7uek 5.4.17-2136.302.7.2.el7uek 5.4.17-2136.302.7.2.1.el7uek 5.4.17-2136.301.1.3.el7uek 5.4.17-2136.302.7.2.2.el7uek 5.4.17-2136.302.7.2.3.el7uek 5.4.17-2136.304.4.1.el7uek 5.4.17-2136.304.4.2.el7uek 5.4.17-2136.304.4.3.el7uek 5.4.17-2136.304.4.4.el7uek 5.4.17-2136.304.4.5.el7uek 5.4.17-2136.305.5.3.el7uek 5.4.17-2136.305.5.4.el7uek 5.4.17-2136.305.5.5.el7uek 5.4.17-2136.306.1.3.el7uek 5.4.17-2136.307.3.1.el7uek 5.4.17-2136.307.3.2.el7uek 5.4.17-2136.307.3.4.el7uek 5.4.17-2136.307.3.5.el7uek 5.4.17-2136.308.7.el7uek 5.4.17-2136.307.3.6.el7uek 5.4.17-2136.308.9.el7uek 5.4.17-2136.309.5.el7uek 5.4.17-2136.309.5.1.el7uek 5.4.17-2136.310.7.el7uek 5.4.17-2136.310.7.1.el7uek 5.4.17-2136.309.4.el7uek 5.4.17-2136.311.6.el7uek 5.4.17-2136.311.6.1.el7uek 5.4.17-2136.312.3.4.el7uek 5.4.17-2136.313.6.el7uek 5.4.17-2136.314.6.2.el7uek 5.4.17-2136.314.6.3.el7uek 5.4.17-2136.315.5.el7uek 5.4.17-2136.316.7.el7uek 5.4.17-2136.315.5.8.el7uek 5.4.17-2136.317.5.3.el7uek 5.4.17-2136.317.5.5.el7uek 5.4.17-2136.318.7.1.el7uek 5.4.17-2136.318.7.2.el7uek 5.4.17-2136.319.1.2.el7uek 5.4.17-2136.319.1.3.el7uek 5.4.17-2136.319.1.4.el7uek 5.4.17-2136.320.7.el7uek 5.4.17-2136.320.7.1.el7uek 5.4.17-2136.321.4.el7uek 5.4.17-2136.322.6.2.el7uek 5.4.17-2136.323.8.el7uek 5.4.17-2136.323.8.1.el7uek 5.4.17-2136.323.8.2.el7uek 5.4.17-2136.321.4.1.el7uek 5.4.17-2136.324.5.3.el7uek 5.4.17-2136.322.6.3.el7uek 5.4.17-2136.325.5.el7uek 5.4.17-2136.325.5.1.el7uek 5.4.17-2136.326.6.el7uek 5.4.17-2136.326.6.1.el7uek 5.4.17-2136.327.2.el7uek 5.4.17-2136.328.3.el7uek 5.4.17-2136.329.3.1.el7uek 5.4.17-2136.322.6.4.el7uek 5.4.17-2136.329.3.2.el7uek 5.4.17-2136.330.7.1.el7uek 5.4.17-2136.331.7.el7uek 5.4.17-2136.322.6.5.el7uek 5.4.17-2136.330.7.4.el7uek 5.4.17-2136.332.5.2.el7uek 5.4.17-2136.333.5.el7uek 5.4.17-2136.330.7.5.el7uek 5.4.17-2136.333.5.1.el7uek 5.4.17-2136.334.6.el7uek 5.4.17-2136.334.6.1.el7uek 5.4.17-2136.335.4.el7uek 5.4.17-2136.335.4.1.el7uek 5.4.17-2136.336.5.1.el7uek 5.4.17-2136.337.5.el7uek 5.4.17-2136.337.5.1.el7uek 5.4.17-2136.336.5.3.el7uek 5.4.17-2136.336.5.3.1.el7uek 5.4.17-2136.336.5.3.2.el7uek 5.4.17-2136.338.4.1.el7uek 5.4.17-2136.338.4.2.el7uek
Oracle Linux 8 UEK 6	Released	116 kernels 5.4.17-2011.2.2.el8uek 5.4.17-2011.1.2.el8uek 5.4.17-2011.3.2.1.el8uek 5.4.17-2011.0.7.el8uek 5.4.17-2011.4.4.el8uek 5.4.17-2011.4.6.el8uek 5.4.17-2011.5.3.el8uek 5.4.17-2011.6.2.el8uek 5.4.17-2011.7.4.el8uek 5.4.17-2036.100.6.1.el8uek 5.4.17-2036.101.2.el8uek 5.4.17-2036.102.0.2.el8uek 5.4.17-2036.103.3.el8uek 5.4.17-2036.103.3.1.el8uek 5.4.17-2036.104.4.el8uek 5.4.17-2036.104.5.el8uek 5.4.17-2102.200.13.el8uek 5.4.17-2102.201.3.el8uek 5.4.17-2102.202.5.el8uek 5.4.17-2102.203.5.el8uek 5.4.17-2102.203.6.el8uek 5.4.17-2102.204.4.2.el8uek 5.4.17-2102.204.4.3.el8uek 5.4.17-2102.204.4.4.el8uek 5.4.17-2102.205.7.2.el8uek 5.4.17-2102.205.7.3.el8uek 5.4.17-2102.206.1.el8uek 5.4.17-2136.300.7.el8uek 5.4.17-2136.301.1.2.el8uek 5.4.17-2136.301.1.4.el8uek 5.4.17-2136.302.6.1.el8uek 5.4.17-2136.302.7.2.el8uek 5.4.17-2136.302.7.2.1.el8uek 5.4.17-2136.301.1.3.el8uek 5.4.17-2136.302.7.2.2.el8uek 5.4.17-2136.302.7.2.3.el8uek 5.4.17-2136.304.4.1.el8uek 5.4.17-2136.304.4.2.el8uek 5.4.17-2136.304.4.3.el8uek 5.4.17-2136.304.4.4.el8uek 5.4.17-2136.304.4.5.el8uek 5.4.17-2136.305.5.3.el8uek 5.4.17-2136.305.5.4.el8uek 5.4.17-2136.305.5.5.el8uek 5.4.17-2136.306.1.3.el8uek 5.4.17-2136.307.3.1.el8uek 5.4.17-2136.307.3.2.el8uek 5.4.17-2136.307.3.4.el8uek 5.4.17-2136.307.3.5.el8uek 5.4.17-2136.308.7.el8uek 5.4.17-2136.307.3.6.el8uek 5.4.17-2136.308.9.el8uek 5.4.17-2136.309.5.el8uek 5.4.17-2136.309.5.1.el8uek 5.4.17-2136.310.7.el8uek 5.4.17-2136.310.7.1.el8uek 5.4.17-2136.309.4.el8uek 5.4.17-2136.311.6.el8uek 5.4.17-2136.311.6.1.el8uek 5.4.17-2136.312.3.4.el8uek 5.4.17-2136.313.6.el8uek 5.4.17-2136.314.6.2.el8uek 5.4.17-2136.314.6.3.el8uek 5.4.17-2136.315.5.el8uek 5.4.17-2136.316.7.el8uek 5.4.17-2136.315.5.8.el8uek 5.4.17-2136.317.5.3.el8uek 5.4.17-2136.317.5.5.el8uek 5.4.17-2136.318.7.1.el8uek 5.4.17-2136.318.7.2.el8uek 5.4.17-2136.319.1.2.el8uek 5.4.17-2136.319.1.3.el8uek 5.4.17-2136.319.1.4.el8uek 5.4.17-2136.320.7.el8uek 5.4.17-2136.320.7.1.el8uek 5.4.17-2136.321.4.el8uek 5.4.17-2136.321.4.1.el8uek 5.4.17-2136.322.6.2.el8uek 5.4.17-2136.323.8.el8uek 5.4.17-2136.323.8.1.el8uek 5.4.17-2136.323.8.2.el8uek 5.4.17-2136.324.5.2.el8uek 5.4.17-2136.324.5.3.el8uek 5.4.17-2136.322.6.3.el8uek 5.4.17-2136.325.5.el8uek 5.4.17-2136.325.5.1.el8uek 5.4.17-2136.326.6.el8uek 5.4.17-2136.326.6.1.el8uek 5.4.17-2136.327.2.el8uek 5.4.17-2136.328.3.el8uek 5.4.17-2136.329.3.1.el8uek 5.4.17-2136.322.6.4.el8uek 5.4.17-2136.329.3.2.el8uek 5.4.17-2136.330.7.1.el8uek 5.4.17-2136.331.7.el8uek 5.4.17-2136.322.6.5.el8uek 5.4.17-2136.330.7.4.el8uek 5.4.17-2136.332.5.2.el8uek 5.4.17-2136.333.5.el8uek 5.4.17-2136.330.7.5.el8uek 5.4.17-2136.333.5.1.el8uek 5.4.17-2136.334.6.el8uek 5.4.17-2136.334.6.1.el8uek 5.4.17-2136.335.4.el8uek 5.4.17-2136.335.4.1.el8uek 5.4.17-2136.336.5.1.el8uek 5.4.17-2136.337.5.el8uek 5.4.17-2136.337.5.1.el8uek 5.4.17-2136.336.5.3.el8uek 5.4.17-2136.336.5.3.1.el8uek 5.4.17-2136.336.5.3.2.el8uek 5.4.17-2136.338.4.1.el8uek 5.4.17-2136.338.4.2.el8uek 5.4.17-2136.339.5.el8uek 5.4.17-2136.339.5.1.el8uek 5.4.17-2136.339.5.2.el8uek
Oracle Linux 8 UEK 7	Released	53 kernels 5.15.0-102.110.5.el8uek 5.15.0-101.103.2.1.el8uek 5.15.0-8.91.4.1.el8uek 5.15.0-7.86.6.1.el8uek 5.15.0-2.52.3.el8uek 5.15.0-100.96.32.el8uek 5.15.0-5.76.5.1.el8uek 5.15.0-6.80.3.1.el8uek 5.15.0-3.60.5.1.el8uek 5.15.0-0.30.20.el8uek 5.15.0-1.43.4.1.el8uek 5.15.0-0.30.20.1.el8uek 5.15.0-1.43.4.2.el8uek 5.15.0-4.70.5.2.el8uek 5.15.0-104.119.4.2.el8uek 5.15.0-0.30.19.el8uek 5.15.0-105.125.6.2.el8uek 5.15.0-105.125.6.2.1.el8uek 5.15.0-105.125.6.2.2.el8uek 5.15.0-106.131.4.el8uek 5.15.0-200.131.27.el8uek 5.15.0-200.131.27.1.el8uek 5.15.0-201.135.6.el8uek 5.15.0-202.135.2.el8uek 5.15.0-102.110.5.1.el8uek 5.15.0-103.114.4.el8uek 5.15.0-203.146.5.1.el8uek 5.15.0-204.147.6.2.el8uek 5.15.0-204.147.6.3.el8uek 5.15.0-205.149.5.1.el8uek 5.15.0-205.149.5.4.el8uek 5.15.0-206.153.7.el8uek 5.15.0-206.153.7.1.el8uek 5.15.0-207.156.6.el8uek 5.15.0-208.159.3.el8uek 5.15.0-208.159.3.2.el8uek 5.15.0-209.161.7.el8uek 5.15.0-209.161.7.1.el8uek 5.15.0-209.161.7.2.el8uek 5.15.0-210.163.7.el8uek 5.15.0-300.163.18.el8uek 5.15.0-300.163.18.1.el8uek 5.15.0-300.163.18.1.1.el8uek 5.15.0-301.163.5.2.el8uek 5.15.0-302.167.6.el8uek 5.15.0-300.163.18.7.el8uek 5.15.0-302.167.6.1.el8uek 5.15.0-303.171.5.2.el8uek 5.15.0-303.171.5.2.1.el8uek 5.15.0-304.171.4.el8uek 5.15.0-304.171.4.1.el8uek 5.15.0-304.171.4.3.el8uek 5.15.0-303.171.5.2.2.el8uek
Oracle Linux 9 UEK 7	Released	53 kernels 5.15.0-101.103.2.1.el9uek 5.15.0-8.91.4.1.el9uek 5.15.0-7.86.6.1.el9uek 5.15.0-5.76.5.1.el9uek 5.15.0-6.80.3.1.el9uek 5.15.0-3.60.5.1.el9uek 5.15.0-0.30.20.el9uek 5.15.0-100.96.32.el9uek 5.15.0-1.43.4.2.el9uek 5.15.0-2.52.3.el9uek 5.15.0-4.70.5.2.el9uek 5.15.0-1.43.4.1.el9uek 5.15.0-0.30.20.1.el9uek 5.15.0-102.110.5.el9uek 5.15.0-102.110.5.1.el9uek 5.15.0-103.114.4.el9uek 5.15.0-104.119.4.2.el9uek 5.15.0-0.30.19.el9uek 5.15.0-105.125.6.2.el9uek 5.15.0-105.125.6.2.1.el9uek 5.15.0-105.125.6.2.2.el9uek 5.15.0-106.131.4.el9uek 5.15.0-200.131.27.el9uek 5.15.0-200.131.27.1.el9uek 5.15.0-201.135.6.el9uek 5.15.0-202.135.2.el9uek 5.15.0-203.146.5.1.el9uek 5.15.0-204.147.6.2.el9uek 5.15.0-204.147.6.3.el9uek 5.15.0-205.149.5.1.el9uek 5.15.0-205.149.5.4.el9uek 5.15.0-206.153.7.el9uek 5.15.0-206.153.7.1.el9uek 5.15.0-207.156.6.el9uek 5.15.0-208.159.3.el9uek 5.15.0-208.159.3.2.el9uek 5.15.0-209.161.7.el9uek 5.15.0-209.161.7.1.el9uek 5.15.0-209.161.7.2.el9uek 5.15.0-210.163.7.el9uek 5.15.0-300.163.18.el9uek 5.15.0-300.163.18.1.el9uek 5.15.0-300.163.18.1.1.el9uek 5.15.0-301.163.5.2.el9uek 5.15.0-302.167.6.el9uek 5.15.0-300.163.18.7.el9uek 5.15.0-302.167.6.1.el9uek 5.15.0-303.171.5.2.el9uek 5.15.0-303.171.5.2.1.el9uek 5.15.0-304.171.4.el9uek 5.15.0-304.171.4.1.el9uek 5.15.0-304.171.4.3.el9uek 5.15.0-303.171.5.2.2.el9uek
Ubuntu 16.04 AWS HWE ESM	Ready For Release	—
Ubuntu 16.04 HWE ESM	Ready For Release	—
Ubuntu 18.04	Ready For Release	—
Ubuntu 18.04 AWS	Ready For Release	—
Ubuntu 18.04 AWS Focal	Will Not Fix	—
Ubuntu 20.04	Planned	—
Ubuntu 22.04	Planned	—
Ubuntu 22.04 AWS	Planned	—
Ubuntu 22.04 Azure	Planned	—
Ubuntu 24.04	Released	20 kernels 6.8.0-35.35 6.8.0-38.38 6.8.0-36.36 6.8.0-39.39 6.8.0-40.40 6.8.0-41.41 6.8.0-44.44 6.8.0-45.45 6.8.0-31.31 6.8.0-47.47 6.8.0-48.48 6.8.0-49.49 6.8.0-50.51 6.8.0-51.52 6.8.0-52.53 6.8.0-54.56 6.8.0-55.57 6.8.0-53.55 6.8.0-56.58 6.8.0-57.59
Ubuntu 24.04 AWS	Ready For Release	—

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2024-56756

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!