In the Linux kernel, the following vulnerability has been resolved:
RDMA/srp: Do not call scsi_done() from srp_abort()
After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools | Aug 2, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jul 16, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python3-perfUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-docsUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-marvell | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.15Upgrade linux-azureUpgrade linux-fipsUpgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-6.5Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-aws-5.15Upgrade linux-gcp-6.5Upgrade linux-nvidia-tegraUpgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-lowlatency-hwe-6.5Upgrade linux-riscvUpgrade linuxUpgrade linux-oem-6.5Upgrade linux-oracle-5.15Upgrade linux-starfiveUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-igxUpgrade linux-oracle-6.5Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-realtimeUpgrade linux-gkeop-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-laptopUpgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub