# CVE-2024-49863: linux: In the Linux kernel, the following vulnerability has been resolved:  vhost/scsi: null-ptr-dereference in vhost_scsi_g...

CVE-2024-49863 is fixed in 44 products on 1 platform, first by ELSA-2024-12713, released October 4, 2024. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2024-49863
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0029
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 4, 2024

## Description

In the Linux kernel, the following vulnerability has been resolved:  vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()  Since commit 3f8ca2e115e5 ("vhost/scsi: Extract common handling code from control queue handler") a null pointer dereference bug can be triggered when guest sends an SCSI AN request.  In vhost_scsi_ctl_handle_vq(), `vc.target` is assigned with `&v_req.tmf.lun[1]` within a switch-case block and is then passed to vhost_scsi_get_req() which extracts `vc->req` and `tpg`. However, for a `VIRTIO_SCSI_T_AN_*` request, tpg is not required, so `vc.target` is set to NULL in this branch. Later, in vhost_scsi_get_req(), `vc->target` is dereferenced without being checked, leading to a null pointer dereference bug. This bug can be triggered from guest.  When this bug occurs, the vhost_worker process is killed while holding `vq->mutex` and the corresponding tpg will remain occupied indefinitely.  Below is the KASAN report: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 840 Comm: poc Not tainted 6.10.0+ #1 Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:vhost_scsi_get_req+0x165/0x3a0 Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 2b 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 65 30 4c 89 e2 48 c1 ea 03 <0f> b6 04 02 4c 89 e2 83 e2 07 38 d0 7f 08 84 c0 0f 85 be 01 00 00 RSP: 0018:ffff888017affb50 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88801b000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888017affcb8 RBP: ffff888017affb80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff888017affc88 R14: ffff888017affd1c R15: ffff888017993000 FS:  000055556e076500(0000) GS:ffff88806b100000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200027c0 CR3: 0000000010ed0004 CR4: 0000000000370ef0 Call Trace:  <TASK>  ? show_regs+0x86/0xa0  ? die_addr+0x4b/0xd0  ? exc_general_protection+0x163/0x260  ? asm_exc_general_protection+0x27/0x30  ? vhost_scsi_get_req+0x165/0x3a0  vhost_scsi_ctl_handle_vq+0x2a4/0xca0  ? __pfx_vhost_scsi_ctl_handle_vq+0x10/0x10  ? __switch_to+0x721/0xeb0  ? __schedule+0xda5/0x5710  ? __kasan_check_write+0x14/0x30  ? _raw_spin_lock+0x82/0xf0  vhost_scsi_ctl_handle_kick+0x52/0x90  vhost_run_work_list+0x134/0x1b0  vhost_task_fn+0x121/0x350 ...  </TASK> ---[ end trace 0000000000000000 ]---  Let's add a check in vhost_scsi_get_req.  [whitespace fixes]

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | bpftool ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.17.2 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 |
| Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.30.1.150600.12.12.6 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_5 sles 15.6 | 1-150600.1.3.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 |
| Linux | kernel-livepatch-SLE15-SP6_Update_6 sles 15.6 | 1-150600.13.3.5 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.17.1 | [SUSE-SU-2024:3984-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3984-1.md) | Nov 13, 2024 |
| Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.9.coco15sp6.1 | [SUSE-SU-2024:4387-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4387-1.md) | Dec 19, 2024 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.17.1 | [SUSE-SU-2024:3986-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-3986-1.md) | Nov 13, 2024 |
| Linux | kernel-uek ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-core ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-core ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-devel ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-modules ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-devel ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-doc ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-modules ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-modules-extra ol 9 | 0:5.15.0-300.163.18.1.el9uek | [ELSA-2024-12713](https://patchblox.com/security/data/fix/linux/elsa-2024-12713.md) | Oct 4, 2024 |
| Linux | kernel-uek-tools ol 8 | 0:5.4.17-2136.337.5.el7uek | [ELSA-2024-12813](https://patchblox.com/security/data/fix/linux/elsa-2024-12813.md) | Nov 12, 2024 |
| Linux | kernel-uek-tools-libs ol 8 | 0:5.4.17-2136.337.5.el7uek | [ELSA-2024-12813](https://patchblox.com/security/data/fix/linux/elsa-2024-12813.md) | Nov 12, 2024 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.30.1 | [SUSE-SU-2024:4318-1](https://patchblox.com/security/data/fix/linux/suse-su-2024-4318-1.md) | Dec 13, 2024 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.115-1 | [DEBIAN-CVE-2024-49863](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49863.md) | Oct 21, 2024 |
| Linux | linux Debian 13.5 (trixie) | 6.11.4-1 | [DEBIAN-CVE-2024-49863](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49863.md) | Oct 21, 2024 |
| Linux | linux Debian 14 | 6.11.4-1 | [DEBIAN-CVE-2024-49863](https://patchblox.com/security/data/fix/linux/debian-cve-2024-49863.md) | Oct 21, 2024 |
| Linux | perf ol 8 | 0:5.4.17-2136.337.5.el7uek | [ELSA-2024-12813](https://patchblox.com/security/data/fix/linux/elsa-2024-12813.md) | Nov 12, 2024 |
| Linux | python-perf ol 8 | 0:5.4.17-2136.337.5.el7uek | [ELSA-2024-12813](https://patchblox.com/security/data/fix/linux/elsa-2024-12813.md) | Nov 12, 2024 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.