In the Linux kernel, the following vulnerability has been resolved:
RDMA/srp: Do not call scsi_done() from srp_abort()
After scmd_eh_abort_handler() has called the SCSI LLD eh_abort_handler callback, it performs one of the following actions: * Call scsi_queue_insert(). * Call scsi_finish_command(). * Call scsi_eh_scmd_add(). Hence, SCSI abort handlers must not call scsi_done(). Otherwise all the above actions would trigger a use-after-free. Hence remove the scsi_done() call from srp_abort(). Keep the srp_free_req() call before returning SUCCESS because we may not see the command again if SUCCESS is returned.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.199-190.747 | Aug 2, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headers | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade dtb-mediatekUpgrade cluster-md-kmp-default | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-laptopUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-oracle-6.5Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-6.5Upgrade linux-gcpUpgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-bluefieldUpgrade linux-gkeop-5.15Upgrade linux-lowlatencyUpgrade linux-riscvUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15Upgrade linux-gkeUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-starfiveUpgrade linux-intel-iotg-5.15Upgrade linux-oem-6.5Upgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linuxUpgrade linux-hwe-6.5Upgrade linux-gcp-6.5Upgrade linux-nvidiaUpgrade linux-nvidia-tegraUpgrade linux-azureUpgrade linux-lowlatency-hwe-6.5Upgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-ibm-5.15 | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub