CVE-2024-43913

HighCVSS 7.0

Published: 26/08/2024(UTC)Updated: 30/10/2026(UTC)Translated: 30/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

In the Linux kernel, the nvme apple driver mishandled device reference counting. After a failed controller initialization (tagset failure), the controller device memory was leaked.

Risk Assessment

The controller memory leak can gradually exhaust resources and cause system instability under repeated initialization failures.

Recommendation

Update the Linux kernel to a version with the reference counting fix in the nvme apple driver. Monitor NVMe controller initialization failures.

Other vulnerabilities in Linux kernel (nvme apple driver)

CVE-2026-90229High
In the Linux kernel's nvme-apple driver, the admin queue allocated with blk_mq_alloc_queue() was never destroyed on controller removal. This left the timeout timer and work armed on a queue that was about to be freed, eventually causing an oops inside blk_mq_timeout_work(). The issue could only be triggered when the controller failed to come up and was then immediately torn down.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: nvme: apple: fix device reference counting Drivers must call nvme_uninit_ctrl after a successful nvme_init_ctrl. Split the allocation side out to make the error handling boundary easier to navigate. The apple driver had been doing this wrong, leaking the controller device memory on a tagset failure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS