In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that qla4xxx parses nlattrs:
- qla4xxx_set_chap_entry()
- qla4xxx_iface_set_param()
- qla4xxx_sysfs_ddb_set_param()
and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data.
Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.326-245.539Upgrade kernel-livepatch-5.10.196-185.743Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfo | Oct 24, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-gkeUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-iotUpgrade linux-azure-5.15Upgrade linuxUpgrade linux-hwe-5.4Upgrade linux-azure-fips | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub