In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Validate sp before freeing associated memory
System crash with the following signature [154563.214890] nvme nvme2: NVME-FC{1}: controller connect complete [154564.169363] qla2xxx [0000:b0:00.1]-3002:2: nvme: Sched: Set ZIO exchange threshold to 3. [154564.169405] qla2xxx [0000:b0:00.1]-ffffff:2: SET ZIO Activity exchange threshold to 5. [154565.539974] qla2xxx [0000:b0:00.1]-5013:2: RSCN database changed – 0078 0080 0000. [154565.545744] qla2xxx [0000:b0:00.1]-5013:2: RSCN database changed – 0078 00a0 0000. [154565.545857] qla2xxx [0000:b0:00.1]-11a2:2: FEC=enabled (data rate). [154565.552760] qla2xxx [0000:b0:00.1]-11a2:2: FEC=enabled (data rate). [154565.553079] BUG: kernel NULL pointer dereference, address: 00000000000000f8 [154565.553080] #PF: supervisor read access in kernel mode [154565.553082] #PF: error_code(0x0000) - not-present page [154565.553084] PGD 80000010488ab067 P4D 80000010488ab067 PUD 104978a067 PMD 0 [154565.553089] Oops: 0000 1 PREEMPT SMP PTI [154565.553092] CPU: 10 PID: 858 Comm: qla2xxx_2_dpc Kdump: loaded Tainted: G OE ------- --- 5.14.0-503.11.1.el9_5.x86_64 #1 [154565.553096] Hardware name: HPE Synergy 660 Gen10/Synergy 660 Gen10 Compute Module, BIOS I43 09/30/2024 [154565.553097] RIP: 0010:qla_fab_async_scan.part.0+0x40b/0x870 [qla2xxx] [154565.553141] Code: 00 00 e8 58 a3 ec d4 49 89 e9 ba 12 20 00 00 4c 89 e6 49 c7 c0 00 ee a8 c0 48 c7 c1 66 c0 a9 c0 bf 00 80 00 10 e8 15 69 00 00 <4c> 8b 8d f8 00 00 00 4d 85 c9 74 35 49 8b 84 24 00 19 00 00 48 8b [154565.553143] RSP: 0018:ffffb4dbc8aebdd0 EFLAGS: 00010286 [154565.553145] RAX: 0000000000000000 RBX: ffff8ec2cf0908d0 RCX: 0000000000000002 [154565.553147] RDX: 0000000000000000 RSI: ffffffffc0a9c896 RDI: ffffb4dbc8aebd47 [154565.553148] RBP: 0000000000000000 R08: ffffb4dbc8aebd45 R09: 0000000000ffff0a [154565.553150] R10: 0000000000000000 R11: 000000000000000f R12: ffff8ec2cf0908d0 [154565.553151] R13: ffff8ec2cf090900 R14: 0000000000000102 R15: ffff8ec2cf084000 [154565.553152] FS: 0000000000000000(0000) GS:ffff8ed27f800000(0000) knlGS:0000000000000000 [154565.553154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [154565.553155] CR2: 00000000000000f8 CR3: 000000113ae0a005 CR4: 00000000007706f0 [154565.553157] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [154565.553158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [154565.553159] PKRU: 55555554 [154565.553160] Call Trace: [154565.553162] <TASK> [154565.553165] ? show_trace_log_lvl+0x1c4/0x2df [154565.553172] ? show_trace_log_lvl+0x1c4/0x2df [154565.553177] ? qla_fab_async_scan.part.0+0x40b/0x870 [qla2xxx] [154565.553215] ? __die_body.cold+0x8/0xd [154565.553218] ? page_fault_oops+0x134/0x170 [154565.553223] ? snprintf+0x49/0x70 [154565.553229] ? exc_page_fault+0x62/0x150 [154565.553238] ? asm_exc_page_fault+0x22/0x30
Check for sp being non NULL before freeing any associated memory
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.251-248.983Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.164-196.303Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel | Mar 27, 2026 | Feb 18, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 16, 2026 | Mar 16, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Feb 18, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 18, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-azureUpgrade linux-image-gke-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-gke-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-134-fipsUpgrade linux-image-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-6.8.0-1060-awsUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-genericUpgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub