In the Linux kernel, the following vulnerability has been resolved:
scsi: qla4xxx: Add length check when parsing nlattrs
There are three places that qla4xxx parses nlattrs:
- qla4xxx_set_chap_entry()
- qla4xxx_iface_set_param()
- qla4xxx_sysfs_ddb_set_param()
and each of them directly converts the nlattr to specific pointer of structure without length checking. This could be dangerous as those attributes are not validated and a malformed nlattr (e.g., length 0) could result in an OOB read that leaks heap dirty data.
Add the nla_len check before accessing the nlattr data and return EINVAL if the length check fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.326-245.539Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.196-185.743 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.55-75.123Upgrade perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf | Oct 24, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-ibm-5.4Upgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-iotUpgrade linux-intel-iot-realtimeUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-raspi-5.4Upgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-awsUpgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-xilinx-zynqmpUpgrade linux-aws-5.15Upgrade linux-fipsUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-azure-5.4 | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub