CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-09-13 · updated 2026-08-04
Weakness: CWE-415

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free.

Affected products

Linux kernel: from 2.6.15 before 4.19.321; from 4.20 before 5.4.283; from 5.5 before 5.10.225; from 5.11 before 5.15.166; from 5.16 before 6.1.108; from 6.2 before 6.6.49 — fixed in 4.19.321, 5.10.225, 5.15.166, 5.4.283, 6.1.108, 6.10.8

How to fix

Upgrade to a fixed version: Linux kernel 4.19.321, 5.10.225, 5.15.166, 5.4.283. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-46673 or the next vulnerability affects your stack