In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: validate nvme_local_port correctly
The driver load failed with error message,
qla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef
and with a kernel crash,
BUG: unable to handle kernel NULL pointer dereference at 0000000000000070 Workqueue: events_unbound qla_register_fcport_fn [qla2xxx] RIP: 0010:nvme_fc_register_remoteport+0x16/0x430 [nvme_fc] RSP: 0018:ffffaaa040eb3d98 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff9dfb46b78c00 RCX: 0000000000000000 RDX: ffff9dfb46b78da8 RSI: ffffaaa040eb3e08 RDI: 0000000000000000 RBP: ffff9dfb612a0a58 R08: ffffffffaf1d6270 R09: 3a34303a30303030 R10: 34303a303030305b R11: 2078787832616c71 R12: ffff9dfb46b78dd4 R13: ffff9dfb46b78c24 R14: ffff9dfb41525300 R15: ffff9dfb46b78da8 FS: 0000000000000000(0000) GS:ffff9dfc67c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000070 CR3: 000000018da10004 CR4: 00000000000206f0 Call Trace: qla_nvme_register_remote+0xeb/0x1f0 [qla2xxx] ? qla2x00_dfs_create_rport+0x231/0x270 [qla2xxx] qla2x00_update_fcport+0x2a1/0x3c0 [qla2xxx] qla_register_fcport_fn+0x54/0xc0 [qla2xxx]
Exit the qla_nvme_register_remote() function when qla_nvme_register_hba() fails and correctly validate nvme_local_port.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade kernel-default-manUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-nvidia | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-64kUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1075-azure | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub