In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Improve SCSI abort handling
The following has been observed on a test setup:
WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30
That warning is triggered by the following statement:
WARN_ON(lrbp->cmd);
Fix this warning by clearing lrbp->cmd from the abort handler.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade cluster-md-kmp-rt | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-virtual-lts-vividUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-vividUpgrade linux-image-aws-hweUpgrade linux-image-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-generic-lts-wilyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lts-utopicUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-ibmUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-azure | Sep 20, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub