In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0
Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | May 28, 2024 | Feb 27, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-source-azure | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-raspi | Nov 19, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub