In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Complete command early within lock
A crash was observed while performing NPIV and FW reset,
BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 1 PREEMPT_RT SMP NOPTI RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000002 RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8881041130d0 RBP: ffff8881041130d0 R08: 0000000000000000 R09: 0000000000000034 R10: ffffc90026f47c48 R11: 0000000000000031 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8881565e4a20 R15: 0000000000000000 FS: 00007f4c69ed3d00(0000) GS:ffff889faac80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 0000000288a50002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x16f/0x4a0 ? do_user_addr_fault+0x174/0x7f0 ? exc_page_fault+0x69/0x1a0 ? asm_exc_page_fault+0x22/0x30 ? dma_direct_unmap_sg+0x51/0x1e0 ? preempt_count_sub+0x96/0xe0 qla2xxx_qpair_sp_free_dma+0x29f/0x3b0 [qla2xxx] qla2xxx_qpair_sp_compl+0x60/0x80 [qla2xxx] __qla2x00_abort_all_cmds+0xa2/0x450 [qla2xxx]
The command completion was done early while aborting the commands in driver unload path but outside lock to avoid the WARN_ON condition of performing dma_free_attr within the lock. However this caused race condition while command completion via multiple paths causing system crash.
Hence complete the command early in unload path but within the lock to avoid race condition.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Mar 27, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-baseUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-syms | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1072-aws | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub