In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
RIP: 0010:kmem_cache_free+0xfa/0x1b0 Call Trace: qla2xxx_mqueuecommand+0x2b5/0x2c0 [qla2xxx] scsi_queue_rq+0x5e2/0xa40 __blk_mq_try_issue_directly+0x128/0x1d0 blk_mq_request_issue_directly+0x4e/0xb0
Fix incorrect call to free srb in qla2xxx_mqueuecommand(), as srb is now allocated by upper layers. This fixes smatch warning of srb unintended free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel | May 28, 2024 | Feb 27, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-docs | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-kvmUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-oracle-5.4 | Nov 19, 2024 | Feb 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub