In the Linux kernel, the following vulnerability has been resolved:
scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
An error is detected with the following report when unloading the driver: "KASAN: use-after-free in lpfc_unreg_rpi+0x1b1b"
The NLP_REG_LOGIN_SEND nlp_flag is set in lpfc_reg_fab_ctrl_node(), but the flag is not cleared upon completion of the login.
This allows a second call to lpfc_unreg_rpi() to proceed with nlp_rpi set to LPFC_RPI_ALLOW_ERROR. This results in a use after free access when used as an rpi_ids array index.
Fix by clearing the NLP_REG_LOGIN_SEND nlp_flag in lpfc_mbx_cmpl_fc_reg_login().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-preemptUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade kernel-preempt-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-default-manUpgrade kernel-azure-base | Aug 9, 2024 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub