In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Improve SCSI abort handling
The following has been observed on a test setup:
WARNING: CPU: 4 PID: 250 at drivers/scsi/ufs/ufshcd.c:2737 ufshcd_queuecommand+0x468/0x65c Call trace: ufshcd_queuecommand+0x468/0x65c scsi_send_eh_cmnd+0x224/0x6a0 scsi_eh_test_devices+0x248/0x418 scsi_eh_ready_devs+0xc34/0xe58 scsi_error_handler+0x204/0x80c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30
That warning is triggered by the following statement:
WARN_ON(lrbp->cmd);
Fix this warning by clearing lrbp->cmd from the abort handler.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade dtb-renesasUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-devel-rtUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-syms-azure | Aug 9, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-generic-lts-vividUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-generic-lts-wilyUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-azureUpgrade linux-image-generic-lts-utopicUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-virtual-lts-vividUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-oracle-lts-18.04 | Sep 20, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub