drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 11, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Sep 11, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Sep 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-headers | Nov 19, 2019 | Sep 11, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Nov 19, 2019 | Sep 11, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 10, 2020 | Sep 9, 2019 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 1, 2020 | Sep 11, 2019 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-ec2Upgrade kernel-defaultUpgrade kernel-ec2-extraUpgrade kernel-default-extraUpgrade kernel-ec2-devel | Nov 7, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-178-genericUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-4.4.0-1136-snapdragonUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.4.0-1132-raspi2Upgrade linux-image-4.4.0-178-powerpc-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-178-powerpc-e500mcUpgrade linux-image-oracle-edgeUpgrade linux-image-4.4.0-178-lowlatencyUpgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-aws-edgeUpgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1070-kvmUpgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-38-genericUpgrade linux-image-awsUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-1066-oemUpgrade linux-image-4.4.0-1106-awsUpgrade linux-image-oemUpgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-4.4.0-178-powerpc64-smpUpgrade linux-image-4.4.0-178-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-178-generic-lpaeUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-azureUpgrade linux-image-4.15.0-1052-kvm | Jan 8, 2020 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub