CVE-2024-27392: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-27392 is a double-free vulnerability discovered in the Linux kernel's NVMe host driver. The issue occurs in the ns_update_nuse() function when nvme_identify_ns() fails, as it frees the pointer to the struct nvme_id_ns before returning, while ns_update_nuse() also calls kfree() for the same pointer even after failure. This vulnerability affects Linux kernel versions from 6.8 up to (excluding) 6.8.2 (NVD).

The vulnerability is classified as CWE-415 (Double Free) with a CVSS v3.1 base score of 7.8 (HIGH). The issue manifests in the NVMe host driver's sysfs implementation where a double-free condition occurs due to improper error handling in the ns_update_nuse() function. The bug was discovered during testing with blktests nvme/045 on kernel v6.8-rc7 (Kernel Patch).

The double-free vulnerability could potentially lead to memory corruption, system crashes, or denial of service conditions. Given the CVSS score of 7.8, it indicates high severity with potential impacts on system confidentiality, integrity, and availability (NVD).

The vulnerability requires local access with low complexity and low privileges to exploit. The attack vector is local (AV:L), requiring an attacker to have local system access. No user interaction is needed for exploitation (UI:N) (NVD).

The vulnerability has been fixed by modifying the ns_update_nuse() function to skip kfree() when nvme_identify_ns() fails. Users should update to Linux kernel version 6.8.2 or later which contains the fix. The patch has been merged into the stable kernel tree (Kernel Patch).