CVE-2024-45013

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nvme: move stopping keep-alive into nvme_uninit_ctrl()<br /> <br /> Commit 4733b65d82bd ("nvme: start keep-alive after admin queue setup")<br /> moves starting keep-alive from nvme_start_ctrl() into<br /> nvme_init_ctrl_finish(), but don&amp;#39;t move stopping keep-alive into<br /> nvme_uninit_ctrl(), so keep-alive work can be started and keep pending<br /> after failing to start controller, finally use-after-free is triggered if<br /> nvme host driver is unloaded.<br /> <br /> This patch fixes kernel panic when running nvme/004 in case that connection<br /> failure is triggered, by moving stopping keep-alive into nvme_uninit_ctrl().<br /> <br /> This way is reasonable because keep-alive is now started in<br /> nvme_init_ctrl_finish().