In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
Commit 8f394da36a36 ("scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG") made the __qlt_24xx_handle_abts() function return early if tcm_qla2xxx_find_cmd_by_tag() didn't find a command, but it missed to clean up the allocated memory for the management command.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 28, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuild | Aug 9, 2024 | Apr 28, 2024 |
| Ubuntu | — | Upgrade linux-azure-fdeUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-gcp-5.15Upgrade linux-gcpUpgrade linux-intel-iotgUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-ibmUpgrade linux-azure-fde-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-oracle-5.15 | Nov 19, 2024 | Apr 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub