In the Linux kernel, the following vulnerability has been resolved:
scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
Calling scsi_remove_host() before scsi_add_host() results in a crash:
BUG: kernel NULL pointer dereference, address: 0000000000000108 RIP: 0010:device_del+0x63/0x440 Call Trace: device_unregister+0x17/0x60 scsi_remove_host+0xee/0x2a0 pm8001_pci_probe+0x6ef/0x1b90 [pm80xx] local_pci_probe+0x3f/0x90
We cannot call scsi_remove_host() in pm8001_alloc() because scsi_add_host() has not been called yet at that point in time.
Function call tree:
pm8001_pci_probe() | `- pm8001_pci_alloc() | | | `- pm8001_alloc() | | | `- scsi_remove_host() | `- scsi_add_host()
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dlm-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub