CVE-2024-56632

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: fix the memleak while create new ctrl failed

Now while we create new ctrl failed, we have not free the tagset occupied by admin_q, here try to fix it.

A low severity memory leak was found in the Linux kernel's NVMe over TCP (nvme-tcp) driver. When the creation of a new nvme-tcp controller fails, the tagset occupied by the controller's admin queue is not freed, so each failed controller creation attempt leaks kernel memory. Exploiting this requires local access to repeatedly trigger failed nvme-tcp controller creation on an affected host, and the consequence is gradual kernel memory exhaustion leading to system resource pressure and degradation of availability. Red Hat assesses the impact of this flaw as Low; this is lower than the CVE.org rating of Important (CVSS 7.5), which is based on a network attack vector that does not match the local nature of this issue. This issue affects the Red Hat Enterprise Linux 9 kernel and kernel-rt packages, where the fix is currently deferred given the low severity and the limited practical impact; the residual risk is gradual memory growth only on systems that repeatedly attempt to create nvme-tcp controllers that fail. Red Hat Enterprise Linux 6, 7, and 8, and the Hosted OpenShift Clusters (ARO and OSD) environments, are listed as not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.