A vulnerability classified as critical has been found in Linux Kernel up to 6.6.65/6.12.4. Affected is the function sg_release of the component scsi. The manipulation leads to improper update of reference count.

This vulnerability is traded as CVE-2024-56631. The attack can only be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.