In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix bsg_done() causing double free
Kernel panic observed on system,
[5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: supervisor write access in kernel mode [5353358.825195] #PF: error_code(0x0002) - not-present page [5353358.825196] PGD 100006067 P4D 0 [5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI [5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1 [5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025 [5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10 [5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246 [5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000 [5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000 [5353358.825214] RBP: 0000000000010000 R08: ff5f5e897b024000 R09: 0000000000000000 [5353358.825215] R10: ff46cf8c40517000 R11: 0000000000000001 R12: 0000000000008090 [5353358.825216] R13: ff591da8f4f6b720 R14: 0000000000001000 R15: 0000000000000000 [5353358.825218] FS: 00007f1e88d47740(0000) GS:ff46cf935f940000(0000) knlGS:0000000000000000 [5353358.825219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [5353358.825220] CR2: ff5f5e897b024000 CR3: 0000000231532004 CR4: 0000000000771ef0 [5353358.825221] PKRU: 55555554 [5353358.825222] Call Trace: [5353358.825223] <TASK> [5353358.825224] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825229] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825232] ? sg_copy_buffer+0xc8/0x110 [5353358.825236] ? __die_body.cold+0x8/0xd [5353358.825238] ? page_fault_oops+0x134/0x170 [5353358.825242] ? kernelmode_fixup_or_oops+0x84/0x110 [5353358.825244] ? exc_page_fault+0xa8/0x150 [5353358.825247] ? asm_exc_page_fault+0x22/0x30 [5353358.825252] ? memcpy_erms+0x6/0x10 [5353358.825253] sg_copy_buffer+0xc8/0x110 [5353358.825259] qla2x00_process_vendor_specific+0x652/0x1320 [qla2xxx] [5353358.825317] qla24xx_bsg_request+0x1b2/0x2d0 [qla2xxx]
Most routines in qla_bsg.c call bsg_done() only for success cases. However a few invoke it for failure case as well leading to a double free. Validate before calling bsg_done().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-doc | Apr 7, 2026 | Apr 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.251-248.983Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.164-196.303 | Mar 27, 2026 | Mar 4, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 25, 2026 | Mar 4, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Mar 31, 2026 | Mar 4, 2026 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade python3-perfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade perfUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-coreUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-core | Apr 10, 2026 | Apr 9, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-gkeopUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-6.8.0-134-genericUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-azure-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fipsUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-5.15.0-1112-aws-fips | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub