CVE-2024-26935

In the Linux kernel, the following vulnerability has been resolved:

scsi: core: Fix unremoved procfs host directory regression

The Linux kernel CVE team has assigned CVE-2024-26935 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050124-CVE-2024-26935-8b4e@gregkh/T

This vulnerability is rated as Low severity because triggering it requires local access or the connection of a malformed device to induce a failure during SCSI host initialization, resulting in a procfs entry leak and kernel warning rather than privilege escalation or memory corruption. Under typical Red Hat Enterprise Linux environments, unprivileged users cannot directly trigger these device registration failure paths without physical access or specialized interface emulation. Consequently, the blast radius is limited to non-fatal kernel log warnings and resource leaks during specific hardware or driver error sequences.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.