In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Improve SCSI abort handling
The following has been observed on a test setup:
WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30
That warning is triggered by the following statement:
WARN_ON(lrbp->cmd);
Fix this warning by clearing lrbp->cmd from the abort handler.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-default-manUpgrade kernel-64kb-optionalUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-genericUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lts-wilyUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-vividUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-gcpUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-generic-lts-utopicUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-virtual-lts-vividUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenial | Sep 20, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub