drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 4.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 11, 2019 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 1, 2020 | Sep 11, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Sep 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-tools | Nov 19, 2019 | Sep 11, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-sourceUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Nov 19, 2019 | Sep 11, 2019 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 10, 2020 | Sep 9, 2019 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 1, 2020 | Sep 11, 2019 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-ec2Upgrade kernel-ec2-extraUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-ec2-devel | Nov 7, 2019 | Sep 11, 2019 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-178-powerpc-e500mcUpgrade linux-image-4.15.0-1050-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1070-snapdragonUpgrade linux-image-4.4.0-1132-raspi2Upgrade linux-image-4.4.0-178-powerpc-smpUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-4.15.0-1052-gcpUpgrade linux-image-4.4.0-178-genericUpgrade linux-image-4.4.0-1070-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-aws-edgeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-edgeUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1136-snapdragonUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1023-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1057-awsUpgrade linux-image-4.4.0-1066-awsUpgrade linux-image-5.0.0-38-genericUpgrade linux-image-aws-hweUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1053-raspi2Upgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-4.4.0-178-lowlatencyUpgrade linux-image-4.4.0-1106-awsUpgrade linux-image-5.0.0-38-generic-lpaeUpgrade linux-image-4.15.0-1031-oracleUpgrade linux-image-5.0.0-1024-raspi2Upgrade linux-image-5.0.0-38-lowlatencyUpgrade linux-image-4.15.0-74-generic-lpaeUpgrade linux-image-5.0.0-1028-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-5.0.0-1009-oracleUpgrade linux-image-azure-edgeUpgrade linux-image-gcpUpgrade linux-image-5.0.0-1033-oem-osp1Upgrade linux-image-4.15.0-74-lowlatencyUpgrade linux-image-4.15.0-1052-kvmUpgrade linux-image-5.0.0-1027-gkeUpgrade linux-image-4.15.0-1066-azureUpgrade linux-image-4.4.0-178-powerpc64-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1028-gcpUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.0.0-1024-kvmUpgrade linux-image-4.4.0-178-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-178-powerpc64-embUpgrade linux-image-4.15.0-74-genericUpgrade linux-image-4.15.0-1066-oem | Jan 8, 2020 | Sep 11, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub