CVE-2024-51566

Published: Nov 12, 2024Modified: Jun 17, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Exploitability: 3.9 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The NVMe driver queue processing is vulernable to guest-induced infinite loops.

Related CWEs

Improper Validation of Specified Index, Position, or Offset in Input

The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.

References (2)

https://security.freebsd.org/advisories/FreeBSD-SA-24:17.bhyve.asc

Source: secteam@freebsd.org

https://security.netapp.com/advisory/ntap-20250207-0008/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.