The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix bsg_done() causing double free
Kernel panic observed on system,
[5353358.825191] BUG: unable to handle page fault for address: ff5f5e897b024000 [5353358.825194] #PF: supervisor write access in kernel mode [5353358.825195] #PF: error_code(0x0002) - not-present page [5353358.825196] PGD 100006067 P4D 0 [5353358.825198] Oops: 0002 [#1] PREEMPT SMP NOPTI [5353358.825200] CPU: 5 PID: 2132085 Comm: qlafwupdate.sub Kdump: loaded Tainted: G W L ------- --- 5.14.0-503.34.1.el9_5.x86_64 #1 [5353358.825203] Hardware name: HPE ProLiant DL360 Gen11/ProLiant DL360 Gen11, BIOS 2.44 01/17/2025 [5353358.825204] RIP: 0010:memcpy_erms+0x6/0x10 [5353358.825211] RSP: 0018:ff591da8f4f6b710 EFLAGS: 00010246 [5353358.825212] RAX: ff5f5e897b024000 RBX: 0000000000007090 RCX: 0000000000001000 [5353358.825213] RDX: 0000000000001000 RSI: ff591da8f4fed090 RDI: ff5f5e897b024000 [5353358.825214] RBP: 0000000000010000 R08: ff5f5e897b024000 R09: 0000000000000000 [5353358.825215] R10: ff46cf8c40517000 R11: 0000000000000001 R12: 0000000000008090 [5353358.825216] R13: ff591da8f4f6b720 R14: 0000000000001000 R15: 0000000000000000 [5353358.825218] FS: 00007f1e88d47740(0000) GS:ff46cf935f940000(0000) knlGS:0000000000000000 [5353358.825219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [5353358.825220] CR2: ff5f5e897b024000 CR3: 0000000231532004 CR4: 0000000000771ef0 [5353358.825221] PKRU: 55555554 [5353358.825222] Call Trace: [5353358.825223] <TASK> [5353358.825224] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825229] ? show_trace_log_lvl+0x1c4/0x2df [5353358.825232] ? sg_copy_buffer+0xc8/0x110 [5353358.825236] ? __die_body.cold+0x8/0xd [5353358.825238] ? page_fault_oops+0x134/0x170 [5353358.825242] ? kernelmode_fixup_or_oops+0x84/0x110 [5353358.825244] ? exc_page_fault+0xa8/0x150 [5353358.825247] ? asm_exc_page_fault+0x22/0x30 [5353358.825252] ? memcpy_erms+0x6/0x10 [5353358.825253] sg_copy_buffer+0xc8/0x110 [5353358.825259] qla2x00_process_vendor_specific+0x652/0x1320 [qla2xxx] [5353358.825317] qla24xx_bsg_request+0x1b2/0x2d0 [qla2xxx]
Most routines in qla_bsg.c call bsg_done() only for success cases. However a few invoke it for failure case as well leading to a double free. Validate before calling bsg_done().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-rt | Apr 7, 2026 | Apr 6, 2026 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.251-248.983Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.164-196.303Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-static | Mar 27, 2026 | Mar 4, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 25, 2026 | Mar 4, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Mar 31, 2026 | Mar 4, 2026 |
| Rocky_linux | — | Upgrade rvUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade libperfUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-core | Apr 10, 2026 | Apr 9, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-5.15Upgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-gkeUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1063-gcp-64k | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 4, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub